ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1001.975308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.986104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.996252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1002.006779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.016159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1002.026154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.035499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1002.045705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.056310] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1002.063710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.079448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.089357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.099692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.110906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.120339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.130280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.139489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.149601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.160988] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1002.167929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.175320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1002.183289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1002.191942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1002.199764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:14:20 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:20 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:20 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) 06:14:20 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x2}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:20 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:20 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:20 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:20 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:20 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:20 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:20 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:20 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:20 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:20 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) 06:14:20 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:21 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:21 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:21 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) 06:14:21 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1005.442664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.464850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.499719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.509838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.533294] device bridge_slave_1 left promiscuous mode 06:14:21 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) [ 1005.553888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.627005] device bridge_slave_0 left promiscuous mode [ 1005.643933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.798963] device veth1_macvtap left promiscuous mode 06:14:22 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1005.830606] device veth0_macvtap left promiscuous mode [ 1005.844506] device veth1_vlan left promiscuous mode [ 1005.857019] device veth0_vlan left promiscuous mode 06:14:22 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1006.323986] device hsr_slave_1 left promiscuous mode [ 1006.378713] device hsr_slave_0 left promiscuous mode [ 1006.455277] team0 (unregistering): Port device team_slave_1 removed [ 1006.468736] team0 (unregistering): Port device team_slave_0 removed [ 1006.480561] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1006.518481] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1006.635621] bond0 (unregistering): Released all slaves [ 1008.571097] IPVS: ftp: loaded support on port[0] = 21 [ 1009.417962] chnl_net:caif_netlink_parms(): no params data found [ 1009.476508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.483164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.490610] device bridge_slave_0 entered promiscuous mode [ 1009.497685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.504924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.513003] device bridge_slave_1 entered promiscuous mode [ 1009.533339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1009.544126] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1009.569875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1009.577383] team0: Port device team_slave_0 added [ 1009.583733] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1009.591448] team0: Port device team_slave_1 added [ 1009.612968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.621458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.647581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.658722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.665058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.691170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.706583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1009.714489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1009.773195] device hsr_slave_0 entered promiscuous mode [ 1009.810522] device hsr_slave_1 entered promiscuous mode [ 1009.853873] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1009.861637] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1009.942584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.949074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.955972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.962422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.003979] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1010.010859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.019315] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1010.033525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1010.040703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.049574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.064347] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1010.070725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.079681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1010.087545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.093958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.111002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1010.118675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.125098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.134812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1010.143252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1010.153417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1010.170682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1010.178166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1010.191853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.198783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.207112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.214582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.223623] device bridge_slave_1 left promiscuous mode [ 1010.229171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.270849] device bridge_slave_0 left promiscuous mode [ 1010.276359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.333312] device veth1_macvtap left promiscuous mode [ 1010.338735] device veth0_macvtap left promiscuous mode [ 1010.344254] device veth1_vlan left promiscuous mode [ 1010.349305] device veth0_vlan left promiscuous mode [ 1010.473643] device hsr_slave_1 left promiscuous mode [ 1010.534492] device hsr_slave_0 left promiscuous mode [ 1010.589092] team0 (unregistering): Port device team_slave_1 removed [ 1010.601394] team0 (unregistering): Port device team_slave_0 removed [ 1010.611450] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1010.643362] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1010.712019] bond0 (unregistering): Released all slaves [ 1010.755177] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1010.761569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1010.768780] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1010.784226] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1010.794485] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1010.801101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1010.807890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1010.819620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.914316] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1010.929864] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1010.937418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1010.950752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1011.017956] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1011.029439] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1011.044970] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1011.056143] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1011.066867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1011.075090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1011.089588] device veth0_vlan entered promiscuous mode [ 1011.095966] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1011.109707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1011.126859] device veth1_vlan entered promiscuous mode [ 1011.133621] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1011.148998] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1011.168825] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1011.184750] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1011.193844] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1011.206632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1011.214114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1011.225818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1011.236265] device veth0_macvtap entered promiscuous mode [ 1011.247314] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1011.258010] device veth1_macvtap entered promiscuous mode [ 1011.268473] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1011.279584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1011.295653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1011.307914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1011.320087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.329220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1011.343001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.356797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1011.372228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.385048] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1011.394201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.405839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1011.415650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1011.425219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1011.436880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1011.449292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1011.463819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.475174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1011.488975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.498169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1011.512581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.524781] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1011.534963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.543294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1011.555015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1012.601870] IPVS: ftp: loaded support on port[0] = 21 [ 1013.367323] chnl_net:caif_netlink_parms(): no params data found [ 1013.429186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.436225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.444171] device bridge_slave_0 entered promiscuous mode [ 1013.452114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.458702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.465866] device bridge_slave_1 entered promiscuous mode [ 1013.486804] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1013.496435] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1013.519979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1013.527450] team0: Port device team_slave_0 added [ 1013.534034] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1013.541420] team0: Port device team_slave_1 added [ 1013.560224] batman_adv: batadv0: Adding interface: batadv_slave_0 06:14:29 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1013.566493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.597523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.609307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.619451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.646151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.657187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1013.665009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1013.723054] device hsr_slave_0 entered promiscuous mode [ 1013.760453] device hsr_slave_1 entered promiscuous mode [ 1013.807336] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1013.814895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1013.928666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.935088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.941960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.948549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.992969] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1013.999372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.008226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1014.018304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1014.025869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.032960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.047481] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1014.053912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.063288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.071691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.078070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.093231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1014.101039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.107386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.141779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1014.149558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1014.157737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1014.165615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1014.174288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1014.182353] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1014.188534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1014.207735] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1014.216513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1014.223986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1014.237327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.314457] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1014.328804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1014.360811] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1014.377696] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1014.385990] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1014.393457] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1014.406332] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1014.413505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1014.422530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1014.430756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1014.437870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1014.446426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.453704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.461536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.468398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.476892] device bridge_slave_1 left promiscuous mode [ 1014.482748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.511065] device bridge_slave_0 left promiscuous mode [ 1014.516790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.573351] device veth1_macvtap left promiscuous mode [ 1014.578684] device veth0_macvtap left promiscuous mode [ 1014.584197] device veth1_vlan left promiscuous mode [ 1014.589471] device veth0_vlan left promiscuous mode [ 1014.722653] device hsr_slave_1 left promiscuous mode [ 1014.763067] device hsr_slave_0 left promiscuous mode [ 1014.820195] team0 (unregistering): Port device team_slave_1 removed [ 1014.829988] team0 (unregistering): Port device team_slave_0 removed [ 1014.840122] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1014.883329] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1014.962309] bond0 (unregistering): Released all slaves [ 1015.024424] device veth0_vlan entered promiscuous mode [ 1015.039408] device veth1_vlan entered promiscuous mode [ 1015.045765] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1015.055846] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1015.068818] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1015.078692] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1015.085856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1015.093947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1015.101536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1015.109144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1015.119725] device veth0_macvtap entered promiscuous mode [ 1015.127081] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1015.137923] device veth1_macvtap entered promiscuous mode [ 1015.145110] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1015.154113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1015.165868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1015.201901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1015.211844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.221573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1015.231321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.240788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1015.250533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.261374] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1015.269854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.280618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1015.289187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1015.297492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1015.305519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1015.320835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1015.332001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.341785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1015.351567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.361051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1015.370925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.381685] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1015.388595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.397606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1015.406204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:14:33 executing program 0: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:33 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:33 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) 06:14:33 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:33 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba0000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:33 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:34 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:34 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:34 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:34 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:34 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:14:35 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:35 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:35 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:35 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1019.067508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.091281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.122134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.145860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.164046] device bridge_slave_1 left promiscuous mode 06:14:35 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1019.169939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.231365] device bridge_slave_0 left promiscuous mode [ 1019.238216] bridge0: port 1(bridge_slave_0) entered disabled state 06:14:35 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1019.465904] device veth1_macvtap left promiscuous mode [ 1019.471663] device veth0_macvtap left promiscuous mode [ 1019.487644] device veth1_vlan left promiscuous mode [ 1019.499503] device veth0_vlan left promiscuous mode [ 1019.778445] device hsr_slave_1 left promiscuous mode [ 1019.834334] device hsr_slave_0 left promiscuous mode [ 1019.912394] team0 (unregistering): Port device team_slave_1 removed [ 1019.937241] team0 (unregistering): Port device team_slave_0 removed [ 1019.963598] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1020.045449] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1020.174122] bond0 (unregistering): Released all slaves [ 1022.021827] IPVS: ftp: loaded support on port[0] = 21 [ 1022.826300] IPVS: ftp: loaded support on port[0] = 21 [ 1022.899341] chnl_net:caif_netlink_parms(): no params data found [ 1022.972204] IPVS: ftp: loaded support on port[0] = 21 [ 1023.021962] chnl_net:caif_netlink_parms(): no params data found [ 1023.101070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.107885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.115771] device bridge_slave_0 entered promiscuous mode [ 1023.125748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.135670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.143526] device bridge_slave_1 entered promiscuous mode [ 1023.176096] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1023.194096] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1023.273976] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1023.282254] team0: Port device team_slave_0 added [ 1023.302601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1023.309936] team0: Port device team_slave_1 added [ 1023.315710] chnl_net:caif_netlink_parms(): no params data found [ 1023.342927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.349786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.357663] device bridge_slave_0 entered promiscuous mode [ 1023.365741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.372652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.379698] device bridge_slave_1 entered promiscuous mode [ 1023.409410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.416141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.441940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.469715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.476086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.501394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.513335] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1023.522106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1023.535691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1023.552208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1023.570696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1023.578203] team0: Port device team_slave_0 added [ 1023.643210] device hsr_slave_0 entered promiscuous mode [ 1023.680436] device hsr_slave_1 entered promiscuous mode [ 1023.720743] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1023.728702] team0: Port device team_slave_1 added [ 1023.737806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1023.761783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1023.769370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.776272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.802617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.820219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.826512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.852095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.875918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1023.888449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.895053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.903693] device bridge_slave_0 entered promiscuous mode [ 1023.910603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1023.917739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.924885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.932572] device bridge_slave_1 entered promiscuous mode [ 1024.032882] device hsr_slave_0 entered promiscuous mode [ 1024.070455] device hsr_slave_1 entered promiscuous mode [ 1024.114112] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1024.125053] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1024.140530] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1024.152897] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1024.202523] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1024.209830] team0: Port device team_slave_0 added [ 1024.229082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1024.236827] team0: Port device team_slave_1 added [ 1024.274180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.280789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.306177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.325375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.332155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.357870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.369832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.376960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.385366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.392901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.400921] device bridge_slave_1 left promiscuous mode [ 1024.406586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.461569] device bridge_slave_0 left promiscuous mode [ 1024.467359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.523373] device veth1_macvtap left promiscuous mode [ 1024.528725] device veth0_macvtap left promiscuous mode [ 1024.534145] device veth1_vlan left promiscuous mode [ 1024.539197] device veth0_vlan left promiscuous mode [ 1024.673007] device hsr_slave_1 left promiscuous mode [ 1024.714445] device hsr_slave_0 left promiscuous mode [ 1024.760220] team0 (unregistering): Port device team_slave_1 removed [ 1024.769991] team0 (unregistering): Port device team_slave_0 removed [ 1024.780223] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1024.823213] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1024.892709] bond0 (unregistering): Released all slaves [ 1024.958570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1024.972666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1025.044736] device hsr_slave_0 entered promiscuous mode [ 1025.090516] device hsr_slave_1 entered promiscuous mode [ 1025.145152] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1025.152544] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1025.166633] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1025.188851] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1025.365029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.388210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.398779] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1025.412897] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1025.428562] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1025.438502] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1025.464441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1025.472509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.482812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1025.497942] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1025.505479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.520513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1025.527701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.538654] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1025.544922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.563080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1025.575822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1025.584594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1025.597198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.603616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.620327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1025.637738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1025.648789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1025.657546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1025.665577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1025.674139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.680554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.688001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1025.696566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1025.704368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.710782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.723142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1025.736927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1025.748652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.756369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1025.764267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1025.772918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1025.785686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1025.794306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.800707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.815545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1025.826834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1025.843310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1025.849597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1025.857978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1025.869259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1025.880716] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1025.893676] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1025.899927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.906760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1025.918935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1025.927276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1025.938664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.948527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1025.964452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1025.973471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1025.981565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1025.988806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1025.998204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1026.006303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1026.014888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.021292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.028695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.037045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.045305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1026.056155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1026.066347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1026.077957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1026.086096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.095226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.106868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1026.115362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.123238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.129612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.136666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.144287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.155184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1026.167075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1026.174099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.181434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.189098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.196970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.204800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.214858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1026.224226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1026.233779] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1026.239860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1026.247497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1026.256136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.264825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.275685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1026.292376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1026.299205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.307374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.316152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.326821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1026.341747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1026.349027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.357656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.365620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.374546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.382793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.394767] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1026.401261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1026.414222] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1026.423791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1026.435132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1026.443659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.452130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.459932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.468029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.477525] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1026.487778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1026.497043] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1026.506080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1026.515444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1026.529019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.546452] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1026.561705] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1026.568070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1026.580943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1026.589397] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1026.605105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.617564] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1026.626021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1026.638047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1026.652445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.792177] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1026.819931] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1026.832464] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1026.839569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1026.848088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.862124] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1026.871035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1026.879020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.913186] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1026.927143] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1026.938574] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1026.946351] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1026.953501] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1026.959814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1026.968863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.981829] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1026.988926] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1026.996178] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1027.006154] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1027.013914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.022446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.035264] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1027.044298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.052813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.061304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.069844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.077777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.084891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.093462] device veth0_vlan entered promiscuous mode [ 1027.105820] device veth0_vlan entered promiscuous mode [ 1027.114834] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1027.122753] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1027.129554] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1027.138717] device veth1_vlan entered promiscuous mode [ 1027.146974] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1027.158133] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1027.169441] device veth1_vlan entered promiscuous mode [ 1027.176356] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1027.186160] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1027.199202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.206709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.214372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.222259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.229845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.239475] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1027.246890] device veth0_vlan entered promiscuous mode [ 1027.257143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.265402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.273023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.282786] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1027.297244] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1027.308837] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1027.321319] device veth1_vlan entered promiscuous mode [ 1027.327355] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1027.335081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.342717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.350950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.361659] device veth0_macvtap entered promiscuous mode [ 1027.367923] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1027.379028] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1027.387360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.394699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.402605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.413369] device veth1_macvtap entered promiscuous mode [ 1027.419594] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1027.429123] device veth0_macvtap entered promiscuous mode [ 1027.436510] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1027.446752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1027.457890] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1027.472313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1027.482428] device veth1_macvtap entered promiscuous mode [ 1027.488643] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1027.498862] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1027.507998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1027.518605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.527882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1027.538180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.548906] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1027.556079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.568683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.576371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.583819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.591592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.598992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.607289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.617156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1027.628241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.637870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1027.647921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.658136] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1027.665120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.673398] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1027.684022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1027.691746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.701979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.709829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.717788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.736298] device veth0_macvtap entered promiscuous mode [ 1027.746407] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1027.758605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1027.772535] device veth1_macvtap entered promiscuous mode [ 1027.778756] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1027.795393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1027.805616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.815748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1027.826160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.835802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1027.845818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.856868] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1027.864275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.875014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.883247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.891007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.898834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.911390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1027.921899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.931405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1027.941289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.950470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1027.961013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.971391] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1027.978304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.989797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1028.001417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1028.008485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1028.017364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1028.034867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.048548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.058089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.068575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.078692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.088524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.097764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.107685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.117926] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1028.125386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.137325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1028.147535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1028.158831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.173609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.183486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.193501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.202660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.212437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.221600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.232049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.242740] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1028.249798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.259297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1028.267941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:14:46 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba0000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:46 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:46 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:14:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) 06:14:46 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:46 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1030.451324] f2fs_msg: 1 callbacks suppressed [ 1030.451363] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1030.463673] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1030.477264] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 1030.487781] attempt to access beyond end of device [ 1030.493375] loop0: rw=12288, want=8200, limit=20 06:14:46 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1030.498343] F2FS-fs (loop0): invalid crc value [ 1030.504011] attempt to access beyond end of device [ 1030.509866] loop0: rw=12288, want=12296, limit=20 [ 1030.520887] F2FS-fs (loop0): invalid crc value [ 1030.526016] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 1030.542586] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 06:14:46 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba0000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1030.552045] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1030.562399] attempt to access beyond end of device [ 1030.568276] loop0: rw=12288, want=8200, limit=20 [ 1030.581962] F2FS-fs (loop0): invalid crc value [ 1030.674158] attempt to access beyond end of device 06:14:47 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1030.706581] loop0: rw=12288, want=12296, limit=20 [ 1030.738543] F2FS-fs (loop0): invalid crc value 06:14:47 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba00000000000008", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:47 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) 06:14:47 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1031.165959] attempt to access beyond end of device [ 1031.179611] loop0: rw=12288, want=8200, limit=20 [ 1031.196910] attempt to access beyond end of device [ 1031.210876] loop0: rw=12288, want=12296, limit=20 06:14:47 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1031.228666] attempt to access beyond end of device [ 1031.240148] loop0: rw=12288, want=8200, limit=20 [ 1031.254409] attempt to access beyond end of device [ 1031.265421] loop0: rw=12288, want=12296, limit=20 06:14:47 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:14:47 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:47 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r7, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r10, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r9, 0x4008642b, &(0x7f0000000180)={r10, 0x18}) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r11, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r11, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r11, 0x3, 0x0, 0x8020003) write$binfmt_aout(r11, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r11, 0x0, 0x3) r12 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r12) r13 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r13) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1031.828821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.875459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.909119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 06:14:48 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1031.927294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.975670] device bridge_slave_1 left promiscuous mode [ 1031.989499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.050991] device bridge_slave_0 left promiscuous mode [ 1032.057981] bridge0: port 1(bridge_slave_0) entered disabled state 06:14:48 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:48 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1032.255391] device veth1_macvtap left promiscuous mode [ 1032.303051] device veth0_macvtap left promiscuous mode 06:14:48 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1032.344018] device veth1_vlan left promiscuous mode [ 1032.367659] device veth0_vlan left promiscuous mode [ 1032.825542] device hsr_slave_1 left promiscuous mode [ 1032.884545] device hsr_slave_0 left promiscuous mode [ 1032.957746] team0 (unregistering): Port device team_slave_1 removed [ 1032.975300] team0 (unregistering): Port device team_slave_0 removed [ 1032.988047] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1033.050408] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1033.220559] bond0 (unregistering): Released all slaves [ 1035.321215] IPVS: ftp: loaded support on port[0] = 21 [ 1036.120698] IPVS: ftp: loaded support on port[0] = 21 [ 1036.207155] chnl_net:caif_netlink_parms(): no params data found [ 1036.320900] chnl_net:caif_netlink_parms(): no params data found [ 1036.382316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.389577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.398282] device bridge_slave_0 entered promiscuous mode [ 1036.412561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.419503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.428825] device bridge_slave_1 entered promiscuous mode [ 1036.474093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1036.484408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.491451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.499196] device bridge_slave_0 entered promiscuous mode [ 1036.507811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.514915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.522479] device bridge_slave_1 entered promiscuous mode [ 1036.530280] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1036.567576] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1036.575577] team0: Port device team_slave_0 added [ 1036.582114] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1036.589421] team0: Port device team_slave_1 added [ 1036.596568] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1036.607166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1036.648049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.655491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.682117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.696024] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1036.704049] team0: Port device team_slave_0 added [ 1036.709947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.716426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.742408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.752978] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1036.761647] team0: Port device team_slave_1 added [ 1036.766931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1036.775088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1036.852939] device hsr_slave_0 entered promiscuous mode [ 1036.890567] device hsr_slave_1 entered promiscuous mode [ 1036.941403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.947778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.973197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.988131] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1036.995802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.002257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.029000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.039779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1037.047150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1037.056980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1037.133780] device hsr_slave_0 entered promiscuous mode [ 1037.170480] device hsr_slave_1 entered promiscuous mode [ 1037.219338] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1037.231744] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1037.361387] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1037.382124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.390269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.398006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.405507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.413505] device bridge_slave_1 left promiscuous mode [ 1037.418994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.471125] device bridge_slave_0 left promiscuous mode [ 1037.476650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.532221] device veth1_macvtap left promiscuous mode [ 1037.537568] device veth0_macvtap left promiscuous mode [ 1037.543056] device veth1_vlan left promiscuous mode [ 1037.548117] device veth0_vlan left promiscuous mode [ 1037.672587] device hsr_slave_1 left promiscuous mode [ 1037.712971] device hsr_slave_0 left promiscuous mode [ 1037.758101] team0 (unregistering): Port device team_slave_1 removed [ 1037.768384] team0 (unregistering): Port device team_slave_0 removed [ 1037.778790] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1037.824043] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1037.881518] bond0 (unregistering): Released all slaves [ 1037.926091] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1037.967675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.978518] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1037.989838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1037.998158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1038.005448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1038.016148] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1038.022371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.036711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1038.047548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.057078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.065032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.071427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.078800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.089524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.099081] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1038.143790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1038.157985] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1038.165240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.173852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.186544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.192943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.199966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1038.212523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1038.222720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1038.237714] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1038.245496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.256591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.267923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1038.282372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1038.298712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1038.308686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1038.322442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1038.333511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1038.343510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.354295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.366003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.372437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.384578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1038.393423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.408378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1038.419170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1038.432618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1038.444571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1038.454250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.465778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.476268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.482726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.499015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1038.509112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1038.521828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1038.529777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1038.542243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.561566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1038.572910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1038.581122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1038.588803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1038.601582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1038.611451] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1038.617545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1038.628522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1038.639195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1038.648773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1038.661639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1038.673023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1038.684537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1038.705106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1038.716099] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1038.728634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1038.736029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1038.749500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1038.758077] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1038.767347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1038.783341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1038.794156] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1038.801370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1038.824247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1038.831206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1038.838027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1038.851183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1038.862919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.878474] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1038.891187] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1038.897538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1038.906195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1038.921822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.026135] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1039.038379] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1039.047740] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1039.059400] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1039.072169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.090736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.100959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.114718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.160481] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1039.167685] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1039.179480] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1039.189980] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1039.200359] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1039.207518] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1039.220401] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1039.227922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1039.236027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.245313] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1039.259567] device veth0_vlan entered promiscuous mode [ 1039.266743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.279300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.286954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1039.295446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.303498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.310765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.320230] device veth0_vlan entered promiscuous mode [ 1039.329146] device veth1_vlan entered promiscuous mode [ 1039.343629] device veth1_vlan entered promiscuous mode [ 1039.365613] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1039.377262] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1039.390911] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1039.398302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.406158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.416215] device veth0_macvtap entered promiscuous mode [ 1039.423119] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1039.433488] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1039.449215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.457078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.469556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.479413] device veth1_macvtap entered promiscuous mode [ 1039.486342] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1039.493750] device veth0_macvtap entered promiscuous mode [ 1039.499932] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1039.510629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1039.523122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1039.531934] device veth1_macvtap entered promiscuous mode [ 1039.538110] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1039.549639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1039.562828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.573019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.582557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.592446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.601863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.611745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.622086] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1039.629055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.639350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1039.647048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.654862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.662381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.669561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.677725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.687036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.697274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.706820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.716843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.726116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.736012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.746240] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1039.753774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.765624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1039.774159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1039.782976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.793161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.802766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.812747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.822361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.832788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.842115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.851858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.862175] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1039.869121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.879734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.887901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.902334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.917553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.927352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.937537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.946737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.957191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.966460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.976551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.987007] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1039.994117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.006570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.015531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:14:58 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba00000000000008", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:58 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed8a60ab563e98b4b2a3d27a7082dbb78abd509ba3da80b856445ab100621d623f543bef2d9f066eb86cd89e9b08e3f5972fe9ca162b123e19291092c88150c5f827b8e68c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d6679079d0000000000000000000000c2beec92979184e4ca09b275c3208f0a208aa34fafdb887631862b01b60831770d434632295fb07277a2b99e55c21ec800c13afd7f7c21e0c9adf876e8e53a3f64b426e61ea9d7a0aadb4a118192c88d4cc4c3ed804fbdebdbc852d3cc5fc1cbb6d44480546e870b2e9114ad47f6034a20d80b49ae16d5e2a459c5ef46ddab31c7c2c43a27d1def9da9adbb893ee35df75a75e3a0f78776a86b813c1a039c1e0c71f90185f5faaa8b2f7c4016284dcebeba22d6e1cbf4ab44a9cc21f74992f0e0f2bc40507d094fbe5695e6bb0f946cd4837b39988f036cf695084c73ad254cd9ff4566d9cffe1cf5fa07448a7cf6d44f1d67fb4fd5ac3acf7d76262fa466235dcd0dd368fc47fc6c8d74c307f35c3240c83b00c2208fcbbc0a90b53e7eb98748a52f9872683582beaf3a4ccaa073bd64c68dd9ec79275d6357b3e8fbeb4466897a4a6ddc026ae06000000000000000af2fe0333d945aaf83f3dd80e97bdd37dff64573462594992e18240c43e74fecaa1062aebd1b5089e1a4f9718b611f48fc249c4a32646e08a41e160edc2cbe7ae365532fa0ac3933c404a7af6a2a119aaab947edaf553d89432131298c90f1e9d974440c1a87209e976dbe1781e28bee66b37b2d1b14459315a4ea9d44b225660973c8c0d02ecb6c2d6ddb65f0a04e7bd4d3b0bf7c878511277c564cb961cc4e4b239e8b3c5885d52f9db8bea5be98ce575a067712a737307a06512352dc3054c8fe1d502ba8dafcd6fd44d6950fd8152703e8afa7984821b373dd2ef9572449a5aba6f33cc3e061a2f8227b019c357519f6b5ff21f62b856608c249c71501dde3828db4beeb83f4337e2fcf860a2cb8ee528"], 0x2e6) statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) 06:14:58 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:58 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:58 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1042.265862] f2fs_msg: 12 callbacks suppressed [ 1042.265903] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1042.278302] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1042.287314] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 1042.298282] attempt to access beyond end of device [ 1042.303555] loop0: rw=12288, want=8200, limit=20 [ 1042.309276] F2FS-fs (loop0): invalid crc value [ 1042.317837] attempt to access beyond end of device [ 1042.323627] loop0: rw=12288, want=12296, limit=20 [ 1042.329660] F2FS-fs (loop0): invalid crc value [ 1042.335184] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 1042.347317] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1042.357545] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 06:14:58 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba00000000000008", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:58 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1042.371094] attempt to access beyond end of device [ 1042.376471] loop0: rw=12288, want=8200, limit=20 [ 1042.383351] F2FS-fs (loop0): invalid crc value [ 1042.400990] attempt to access beyond end of device [ 1042.406434] loop0: rw=12288, want=12296, limit=20 [ 1042.480545] F2FS-fs (loop0): invalid crc value 06:14:58 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, 0x0) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:58 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:58 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r8, 0x4008642b, &(0x7f0000000180)={r9, 0x18}) dup2(0xffffffffffffffff, r8) pipe(&(0x7f0000000100)) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r10, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r10, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r10, 0x3, 0x0, 0x8020003) lseek(r10, 0x0, 0x3) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) r12 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r12) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:58 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba00000000000008000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:14:59 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, 0x0) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:14:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) 06:14:59 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:14:59 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:14:59 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, 0x0) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1043.332370] attempt to access beyond end of device [ 1043.353543] loop0: rw=12288, want=8200, limit=20 [ 1043.376657] attempt to access beyond end of device [ 1043.387961] loop0: rw=12288, want=12296, limit=20 [ 1043.409207] attempt to access beyond end of device [ 1043.414891] loop0: rw=12288, want=8200, limit=20 [ 1043.434327] attempt to access beyond end of device [ 1043.542626] loop0: rw=12288, want=12296, limit=20 [ 1043.612274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.631474] batman_adv: batadv0: Removing interface: batadv_slave_0 06:14:59 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1043.662589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.688074] batman_adv: batadv0: Removing interface: batadv_slave_1 06:15:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) [ 1043.714489] device bridge_slave_1 left promiscuous mode [ 1043.720490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.761318] device bridge_slave_0 left promiscuous mode [ 1043.784999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.856990] device veth1_macvtap left promiscuous mode [ 1043.891761] device veth0_macvtap left promiscuous mode [ 1043.946396] attempt to access beyond end of device 06:15:00 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1043.982795] device veth1_vlan left promiscuous mode [ 1043.995927] loop0: rw=12288, want=8200, limit=20 06:15:00 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1044.025229] device veth0_vlan left promiscuous mode [ 1044.031849] attempt to access beyond end of device [ 1044.065220] loop0: rw=12288, want=12296, limit=20 [ 1044.098498] attempt to access beyond end of device [ 1044.113411] loop0: rw=12288, want=8200, limit=20 [ 1044.129508] attempt to access beyond end of device [ 1044.142672] loop0: rw=12288, want=12296, limit=20 [ 1044.473568] device hsr_slave_1 left promiscuous mode [ 1044.515552] device hsr_slave_0 left promiscuous mode [ 1044.599844] team0 (unregistering): Port device team_slave_1 removed [ 1044.613136] team0 (unregistering): Port device team_slave_0 removed [ 1044.631565] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1044.688671] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1044.808495] bond0 (unregistering): Released all slaves [ 1046.861804] IPVS: ftp: loaded support on port[0] = 21 [ 1047.648533] IPVS: ftp: loaded support on port[0] = 21 [ 1047.728408] chnl_net:caif_netlink_parms(): no params data found [ 1047.836095] chnl_net:caif_netlink_parms(): no params data found [ 1047.892729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.899204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.906362] device bridge_slave_0 entered promiscuous mode [ 1047.914159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.921542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.928677] device bridge_slave_1 entered promiscuous mode [ 1047.968102] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1047.984724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.991583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.998702] device bridge_slave_0 entered promiscuous mode [ 1048.006642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1048.014568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.021361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.028504] device bridge_slave_1 entered promiscuous mode [ 1048.065079] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1048.074982] team0: Port device team_slave_0 added [ 1048.081436] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1048.088732] team0: Port device team_slave_1 added [ 1048.095386] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1048.115323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1048.146147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.152579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.178272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.193197] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1048.200730] team0: Port device team_slave_0 added [ 1048.206710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.213582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.239894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.250665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1048.259091] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1048.266624] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1048.274612] team0: Port device team_slave_1 added [ 1048.308982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.315398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.341209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.353414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.359691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.385713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.424806] device hsr_slave_0 entered promiscuous mode [ 1048.470458] device hsr_slave_1 entered promiscuous mode [ 1048.511038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1048.522626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1048.530156] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1048.537093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1048.622865] device hsr_slave_0 entered promiscuous mode [ 1048.660402] device hsr_slave_1 entered promiscuous mode [ 1048.720767] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1048.736868] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1048.859680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1048.882978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.889754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.898070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.905169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.913035] device bridge_slave_1 left promiscuous mode [ 1048.918579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.971072] device bridge_slave_0 left promiscuous mode [ 1048.976700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.033911] device veth1_macvtap left promiscuous mode [ 1049.039352] device veth0_macvtap left promiscuous mode [ 1049.045030] device veth1_vlan left promiscuous mode [ 1049.050486] device veth0_vlan left promiscuous mode [ 1049.196049] device hsr_slave_1 left promiscuous mode [ 1049.243036] device hsr_slave_0 left promiscuous mode [ 1049.308640] team0 (unregistering): Port device team_slave_1 removed [ 1049.318847] team0 (unregistering): Port device team_slave_0 removed [ 1049.328524] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1049.363281] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1049.442098] bond0 (unregistering): Released all slaves [ 1049.506820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1049.551175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.566547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1049.577250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.587364] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1049.595362] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1049.605999] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1049.612178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.618811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.626229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.636008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1049.646245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1049.655486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.663241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.671107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.678917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.687124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.693874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.704900] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1049.712048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.718995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.728256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1049.736250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.744962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.752797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.759149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.769020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1049.779096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1049.788802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.797128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.805049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.811500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.818580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.827094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.837712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1049.845209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.856190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1049.901005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.909022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.917646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.924519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.935662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1049.945004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1049.952782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.961570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.969696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.982201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1049.993404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1050.001853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1050.009398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1050.019190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1050.027215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1050.039058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1050.047281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.055925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.066587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1050.076161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1050.083739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.092881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.105354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1050.113806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1050.128877] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1050.136996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.152031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1050.160596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1050.167813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1050.181176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1050.197263] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1050.211037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1050.227985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1050.235285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.248663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.259693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.272739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.284601] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1050.296709] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1050.306195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.317867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.328204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.355313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.373451] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1050.385897] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1050.408075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.423606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.446158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.619214] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1050.632830] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1050.641213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.649577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.663185] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1050.676344] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1050.684863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.693654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.769692] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1050.777841] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1050.785250] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1050.796696] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1050.807058] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1050.814286] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1050.823554] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1050.830316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.837862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.847396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.855019] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1050.864182] device veth0_vlan entered promiscuous mode [ 1050.887078] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1050.894373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.907716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.916678] device veth1_vlan entered promiscuous mode [ 1050.927976] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1050.936010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1050.945906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.953451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1050.964295] device veth0_vlan entered promiscuous mode [ 1050.972530] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1050.990796] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1050.999602] device veth1_vlan entered promiscuous mode [ 1051.006098] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1051.015760] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1051.026573] device veth0_macvtap entered promiscuous mode [ 1051.033844] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1051.041693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1051.048972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1051.056462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1051.064453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.075591] device veth1_macvtap entered promiscuous mode [ 1051.086407] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1051.094295] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1051.104793] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1051.112448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.119643] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1051.130546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1051.142596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1051.154178] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1051.165326] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1051.173899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1051.182433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.192798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1051.204428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.213979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1051.223935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.233092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1051.242897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.253468] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1051.260661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.270770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1051.279235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.287754] device veth0_macvtap entered promiscuous mode [ 1051.294603] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1051.304302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1051.314372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.323775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1051.333967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.343691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1051.354319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.364863] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1051.371981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.379738] device veth1_macvtap entered promiscuous mode [ 1051.386683] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1051.393896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.401558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1051.408790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1051.416939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1051.436187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1051.447705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1051.458351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1051.468602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.478156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1051.488553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.497751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1051.507502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.516750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1051.526643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.537003] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1051.544074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.557346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1051.566162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.576428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1051.587047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.597022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1051.607712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.617453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1051.627385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.636745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1051.646552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.656807] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1051.663916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.673053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1051.682113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:15:10 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:10 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) 06:15:10 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:15:10 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:10 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba00000000000008000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1053.961646] f2fs_msg: 23 callbacks suppressed [ 1053.961684] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 06:15:10 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:10 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1054.129001] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1054.170312] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 1054.210915] attempt to access beyond end of device [ 1054.233182] loop0: rw=12288, want=8200, limit=20 [ 1054.249984] F2FS-fs (loop0): invalid crc value [ 1054.273793] attempt to access beyond end of device [ 1054.290278] loop0: rw=12288, want=12296, limit=20 06:15:10 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1054.348676] F2FS-fs (loop0): invalid crc value [ 1054.414138] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 06:15:10 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1054.479032] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1054.503534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1054.530049] attempt to access beyond end of device [ 1054.540589] loop0: rw=12288, want=8200, limit=20 [ 1054.552035] F2FS-fs (loop0): invalid crc value [ 1054.563649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.571964] attempt to access beyond end of device [ 1054.582568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.590224] loop0: rw=12288, want=12296, limit=20 [ 1054.595578] F2FS-fs (loop0): invalid crc value [ 1054.607065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.628870] batman_adv: batadv0: Removing interface: batadv_slave_1 06:15:11 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:11 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:11 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1054.817533] device bridge_slave_1 left promiscuous mode [ 1054.873321] bridge0: port 2(bridge_slave_1) entered disabled state 06:15:11 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1054.957913] device bridge_slave_0 left promiscuous mode [ 1054.965114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.290429] device veth1_macvtap left promiscuous mode 06:15:11 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1055.318560] device veth0_macvtap left promiscuous mode [ 1055.331399] device veth1_vlan left promiscuous mode [ 1055.350386] device veth0_vlan left promiscuous mode [ 1055.471789] attempt to access beyond end of device [ 1055.491004] loop0: rw=12288, want=8200, limit=20 [ 1055.521952] attempt to access beyond end of device [ 1055.555703] loop0: rw=12288, want=12296, limit=20 [ 1055.601047] attempt to access beyond end of device 06:15:11 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1055.659110] loop0: rw=12288, want=8200, limit=20 [ 1055.689825] attempt to access beyond end of device [ 1055.720212] loop0: rw=12288, want=12296, limit=20 [ 1056.123228] device hsr_slave_1 left promiscuous mode [ 1056.164497] device hsr_slave_0 left promiscuous mode [ 1056.222151] team0 (unregistering): Port device team_slave_1 removed [ 1056.257304] team0 (unregistering): Port device team_slave_0 removed [ 1056.268632] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1056.324492] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1056.469312] bond0 (unregistering): Released all slaves [ 1058.351763] IPVS: ftp: loaded support on port[0] = 21 [ 1059.148901] IPVS: ftp: loaded support on port[0] = 21 [ 1059.205858] chnl_net:caif_netlink_parms(): no params data found [ 1059.339923] chnl_net:caif_netlink_parms(): no params data found [ 1059.377080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.387058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.394540] device bridge_slave_0 entered promiscuous mode [ 1059.402763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.410377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.417421] device bridge_slave_1 entered promiscuous mode [ 1059.457563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1059.468049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1059.495805] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1059.503261] team0: Port device team_slave_0 added [ 1059.509602] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1059.518607] team0: Port device team_slave_1 added [ 1059.552990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.559382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.585432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.607878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.614333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.639932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.650601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.657066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.665057] device bridge_slave_0 entered promiscuous mode [ 1059.672537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1059.679711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.686271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.693828] device bridge_slave_1 entered promiscuous mode [ 1059.705339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1059.763003] device hsr_slave_0 entered promiscuous mode [ 1059.800438] device hsr_slave_1 entered promiscuous mode [ 1059.842478] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1059.857243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1059.865549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1059.882126] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1059.903641] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1059.911178] team0: Port device team_slave_0 added [ 1059.923897] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1059.931267] team0: Port device team_slave_1 added [ 1059.966145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.972638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.998061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.018840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.025361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.050994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.061895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1060.074450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1060.144913] device hsr_slave_0 entered promiscuous mode [ 1060.190430] device hsr_slave_1 entered promiscuous mode [ 1060.239029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1060.251115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1060.277149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.284275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.293033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.299776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.307888] device bridge_slave_1 left promiscuous mode [ 1060.313974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.341188] device bridge_slave_0 left promiscuous mode [ 1060.346912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.392571] device veth1_macvtap left promiscuous mode [ 1060.398065] device veth0_macvtap left promiscuous mode [ 1060.403555] device veth1_vlan left promiscuous mode [ 1060.408615] device veth0_vlan left promiscuous mode [ 1060.546421] device hsr_slave_1 left promiscuous mode [ 1060.592839] device hsr_slave_0 left promiscuous mode [ 1060.638099] team0 (unregistering): Port device team_slave_1 removed [ 1060.648426] team0 (unregistering): Port device team_slave_0 removed [ 1060.658025] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1060.693432] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1060.770708] bond0 (unregistering): Released all slaves [ 1060.836279] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1060.900281] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1060.936291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.946383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1060.957254] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1060.967594] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1060.974288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.981711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.988786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.022190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1061.030216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1061.038097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1061.046389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.052802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.067428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1061.080914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.088398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.097741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.106029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.112442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.133037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1061.144755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.151598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.168098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1061.178332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1061.186424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.198044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1061.208403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1061.215855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.224667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.232718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1061.239737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.251174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1061.261675] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1061.267773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.275459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.283162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.291672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.303567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1061.314141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1061.322458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.336191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.344077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1061.356641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1061.364525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.370930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.386053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1061.396597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1061.405757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.413884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1061.422040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1061.429698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.438312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.446584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.453131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.463048] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1061.469148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1061.481412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1061.488468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.508981] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1061.518732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1061.533341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.544021] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1061.554443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1061.563121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1061.569887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1061.577549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.586021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.601668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.611414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1061.624635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.632925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.648521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.658721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1061.670739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.678382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.693896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1061.707067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1061.715731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1061.732007] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1061.738084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1061.768531] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1061.778830] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1061.786874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1061.794238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1061.808952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.859302] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1061.872617] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1061.880314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1061.888291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1061.953915] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1061.965552] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1061.972978] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1061.983099] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1061.994620] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1062.008530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1062.021150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1062.029280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1062.036574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1062.049884] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1062.057352] device veth0_vlan entered promiscuous mode [ 1062.069556] device veth1_vlan entered promiscuous mode [ 1062.081497] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1062.088192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1062.101922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1062.109967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1062.124640] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1062.142447] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1062.153742] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1062.161820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1062.169257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1062.177442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1062.189798] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1062.199871] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1062.206923] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1062.216775] device veth0_macvtap entered promiscuous mode [ 1062.227917] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1062.237779] device veth1_macvtap entered promiscuous mode [ 1062.248831] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1062.257570] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1062.265086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1062.272916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1062.280637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1062.288188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1062.296995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1062.305711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1062.317406] device veth0_vlan entered promiscuous mode [ 1062.329002] device veth1_vlan entered promiscuous mode [ 1062.337290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1062.350205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1062.367811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.377972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.387901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.398024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.407369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.417165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.428010] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1062.435656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.446002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1062.454868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1062.466356] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1062.475109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1062.484981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.495053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1062.504844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.514268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1062.524027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.534508] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1062.541979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.551886] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1062.560690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1062.568583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1062.578989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1062.587111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1062.605452] device veth0_macvtap entered promiscuous mode [ 1062.617127] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1062.628429] device veth1_macvtap entered promiscuous mode [ 1062.645034] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1062.657179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1062.669274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1062.679299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.690662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.700502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.710328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.719430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.729300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.738488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.749091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.759669] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1062.766976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.776559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1062.784699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1062.793297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1062.801453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1062.811884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1062.822213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.831818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1062.841612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.850962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1062.860836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.869962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1062.879763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.889972] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1062.897195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.905207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1062.913636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:15:21 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba00000000000008000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:21 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:15:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) r0 = dup(0xffffffffffffffff) statx(r0, 0x0, 0x0, 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) [ 1064.772122] f2fs_msg: 12 callbacks suppressed [ 1064.772139] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1064.784662] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1064.796959] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 1064.807839] attempt to access beyond end of device [ 1064.813791] loop0: rw=12288, want=8200, limit=20 [ 1064.818914] F2FS-fs (loop0): invalid crc value [ 1064.824654] attempt to access beyond end of device [ 1064.829754] loop0: rw=12288, want=12296, limit=20 [ 1064.835160] F2FS-fs (loop0): invalid crc value [ 1064.841728] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 1064.849304] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1064.858481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1064.881528] attempt to access beyond end of device 06:15:21 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:21 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:21 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:21 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba0000000000000800000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1064.902419] loop0: rw=12288, want=8200, limit=20 [ 1064.914345] F2FS-fs (loop0): invalid crc value [ 1064.923026] attempt to access beyond end of device [ 1064.928514] loop0: rw=12288, want=12296, limit=20 [ 1064.935297] F2FS-fs (loop0): invalid crc value 06:15:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) dup(0xffffffffffffffff) 06:15:21 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:21 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1065.492896] attempt to access beyond end of device [ 1065.518328] loop0: rw=12288, want=8200, limit=20 [ 1065.533358] attempt to access beyond end of device [ 1065.552256] loop0: rw=12288, want=12296, limit=20 06:15:21 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1065.572722] attempt to access beyond end of device [ 1065.608167] loop0: rw=12288, want=8200, limit=20 [ 1065.762699] attempt to access beyond end of device 06:15:22 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:22 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1065.790974] loop0: rw=12288, want=12296, limit=20 06:15:22 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1066.061201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.078878] batman_adv: batadv0: Removing interface: batadv_slave_0 06:15:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) dup(0xffffffffffffffff) 06:15:22 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1066.155748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.189589] batman_adv: batadv0: Removing interface: batadv_slave_1 06:15:22 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1066.254901] device bridge_slave_1 left promiscuous mode [ 1066.341970] attempt to access beyond end of device [ 1066.508162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.616996] loop0: rw=12288, want=8200, limit=20 06:15:22 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1066.690690] attempt to access beyond end of device [ 1066.713592] loop0: rw=12288, want=12296, limit=20 [ 1066.721988] device bridge_slave_0 left promiscuous mode [ 1066.745957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.763028] attempt to access beyond end of device [ 1066.776455] loop0: rw=12288, want=8200, limit=20 [ 1066.789880] attempt to access beyond end of device [ 1066.798353] device veth1_macvtap left promiscuous mode [ 1066.798379] device veth0_macvtap left promiscuous mode [ 1066.798425] device veth1_vlan left promiscuous mode [ 1066.798460] device veth0_vlan left promiscuous mode [ 1066.884137] loop0: rw=12288, want=12296, limit=20 [ 1067.178729] device hsr_slave_1 left promiscuous mode [ 1067.238692] device hsr_slave_0 left promiscuous mode [ 1067.322119] team0 (unregistering): Port device team_slave_1 removed [ 1067.352333] team0 (unregistering): Port device team_slave_0 removed [ 1067.379654] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1067.449095] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1067.526276] bond0 (unregistering): Released all slaves [ 1069.211185] IPVS: ftp: loaded support on port[0] = 21 [ 1070.036076] chnl_net:caif_netlink_parms(): no params data found [ 1070.097716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.105034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.112562] device bridge_slave_0 entered promiscuous mode [ 1070.119733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.127252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.134910] device bridge_slave_1 entered promiscuous mode [ 1070.156322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1070.165786] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1070.186551] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1070.194439] team0: Port device team_slave_0 added [ 1070.201208] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1070.209512] team0: Port device team_slave_1 added [ 1070.228579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.235094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.263000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.274589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.281268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.309112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.320598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1070.328541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1070.392908] device hsr_slave_0 entered promiscuous mode [ 1070.430486] device hsr_slave_1 entered promiscuous mode [ 1070.480972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1070.488512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1070.568669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.575740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.582475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.589709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.635859] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1070.642682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.653552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1070.664380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1070.673235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.680717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.691578] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1070.698096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.708541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1070.716524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.723251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.735191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1070.745070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.751710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.771643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1070.779856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1070.798917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.810650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1070.822122] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1070.829087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1070.837937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1070.846000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1070.854958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1070.869366] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1070.878221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1070.886054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.897385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.973920] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1070.986164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1071.020978] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1071.034181] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1071.042782] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1071.049808] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1071.060288] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1071.067513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1071.076344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1071.085867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1071.093360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1071.104503] device veth0_vlan entered promiscuous mode [ 1071.116013] device veth1_vlan entered promiscuous mode [ 1071.123004] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1071.132802] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1071.148904] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1071.160962] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1071.168884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1071.176929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1071.184731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1071.193365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1071.204911] device veth0_macvtap entered promiscuous mode [ 1071.212077] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1071.223972] device veth1_macvtap entered promiscuous mode [ 1071.230775] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1071.241761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1071.252214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1071.262710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1071.273164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.283945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1071.293904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.303100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1071.313640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.323141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1071.333240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.343688] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1071.350992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.359359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1071.368694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1071.376585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1071.385424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1071.396480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1071.406981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.416921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1071.427984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.438310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1071.448718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.458290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1071.468541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.479728] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1071.487626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.496021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1071.504157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:15:29 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba0000000000000800000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:29 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:29 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:29 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:29 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:15:29 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:15:30 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba0000000000000800000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x3}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:30 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:30 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:30 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:30 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:30 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:30 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) r0 = dup(0xffffffffffffffff) statx(r0, 0x0, 0x0, 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 06:15:30 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1074.855017] f2fs_msg: 23 callbacks suppressed [ 1074.855065] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 06:15:31 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:31 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1075.009273] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1075.053835] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 1075.078867] attempt to access beyond end of device [ 1075.092762] loop0: rw=12288, want=8200, limit=20 06:15:31 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1075.104132] F2FS-fs (loop0): invalid crc value [ 1075.119413] attempt to access beyond end of device [ 1075.203066] loop0: rw=12288, want=12296, limit=20 06:15:31 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1075.300508] F2FS-fs (loop0): invalid crc value [ 1075.306295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.319313] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 1075.337620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.367093] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1075.367291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.385432] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 06:15:31 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1075.437009] attempt to access beyond end of device [ 1075.450442] batman_adv: batadv0: Removing interface: batadv_slave_1 06:15:31 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700), 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1075.486210] loop0: rw=12288, want=8200, limit=20 [ 1075.562947] F2FS-fs (loop0): invalid crc value [ 1075.576911] device bridge_slave_1 left promiscuous mode [ 1075.634792] attempt to access beyond end of device [ 1075.657334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.667040] loop0: rw=12288, want=12296, limit=20 [ 1075.698630] F2FS-fs (loop0): invalid crc value [ 1075.713497] device bridge_slave_0 left promiscuous mode [ 1075.722614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.797815] device veth1_macvtap left promiscuous mode [ 1075.811060] device veth0_macvtap left promiscuous mode [ 1075.820802] device veth1_vlan left promiscuous mode [ 1075.826065] device veth0_vlan left promiscuous mode [ 1076.156760] device hsr_slave_1 left promiscuous mode [ 1076.199758] device hsr_slave_0 left promiscuous mode [ 1076.262215] team0 (unregistering): Port device team_slave_1 removed [ 1076.293033] team0 (unregistering): Port device team_slave_0 removed [ 1076.319111] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1076.353581] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1076.415743] bond0 (unregistering): Released all slaves [ 1078.071910] IPVS: ftp: loaded support on port[0] = 21 [ 1078.947200] chnl_net:caif_netlink_parms(): no params data found [ 1079.015087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.022829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.031123] device bridge_slave_0 entered promiscuous mode [ 1079.038647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.046387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.054577] device bridge_slave_1 entered promiscuous mode [ 1079.074336] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1079.090526] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1079.111914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1079.121174] team0: Port device team_slave_0 added [ 1079.130581] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1079.137891] team0: Port device team_slave_1 added [ 1079.156019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.163071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.189098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.206912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.213723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.242119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.253319] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1079.263751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1079.323920] device hsr_slave_0 entered promiscuous mode [ 1079.360641] device hsr_slave_1 entered promiscuous mode [ 1079.401176] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1079.413253] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1079.497377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.504309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.512674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.519147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.563465] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1079.569976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.579277] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1079.593560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1079.601467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.608203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.618654] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1079.625771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.650970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1079.659411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.665872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.673504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1079.681438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.687881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.699069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1079.707241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1079.717669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1079.731944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1079.744462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.751829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.759988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.769114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.777317] device bridge_slave_1 left promiscuous mode [ 1079.783474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.841019] device bridge_slave_0 left promiscuous mode [ 1079.846757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.902338] device veth1_macvtap left promiscuous mode [ 1079.907939] device veth0_macvtap left promiscuous mode [ 1079.914248] device veth1_vlan left promiscuous mode [ 1079.920983] device veth0_vlan left promiscuous mode [ 1080.052762] device hsr_slave_1 left promiscuous mode [ 1080.104179] device hsr_slave_0 left promiscuous mode [ 1080.169407] team0 (unregistering): Port device team_slave_1 removed [ 1080.180251] team0 (unregistering): Port device team_slave_0 removed [ 1080.189937] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1080.234066] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1080.301666] bond0 (unregistering): Released all slaves [ 1080.358466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1080.369243] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1080.375791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1080.383707] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1080.392036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1080.405839] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1080.415665] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1080.422333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1080.429171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1080.446998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.567599] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1080.584121] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1080.592864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1080.604551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1080.671803] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1080.679043] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1080.691100] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1080.704987] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1080.713220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1080.724942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1080.734250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1080.745041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1080.755542] device veth0_vlan entered promiscuous mode [ 1080.772996] device veth1_vlan entered promiscuous mode [ 1080.779244] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1080.797175] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1080.817224] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1080.832330] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1080.839232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1080.851301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1080.858815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1080.871544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1080.882605] device veth0_macvtap entered promiscuous mode [ 1080.889638] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1080.905477] device veth1_macvtap entered promiscuous mode [ 1080.914918] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1080.926745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1080.943044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1080.956447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1080.967713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.979798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1080.993627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.002845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1081.016313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.026897] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1081.039378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.048326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.060284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1081.067627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1081.079583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.090678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1081.101725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.111335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1081.121533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.130802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1081.140891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.151667] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1081.158588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.166723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1081.175325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1082.444147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25930 comm=syz-executor.1 06:15:39 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:39 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:15:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed8a60ab563e98b4b2a3d27a7082dbb78abd509ba3da80b856445ab100621d623f543bef2d9f066eb86cd89e9b08e3f5972fe9ca162b123e19291092c88150c5f827b8e68c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d6679079d0000000000000000000000c2beec92979184e4ca09b275c3208f0a208aa34fafdb887631862b01b60831770d434632295fb07277a2b99e55c21ec800c13afd7f7c21e0c9adf876e8e53a3f64b426e61ea9d7a0aadb4a118192c88d4cc4c3ed804fbdebdbc852d3cc5fc1cbb6d44480546e870b2e9114ad47f6034a20d80b49ae16d5e2a459c5ef46ddab31c7c2c43a27d1def9da9adbb893ee35df75a75e3a0f78776a86b813c1a039c1e0c71f90185f5faaa8b2f7c4016284dcebeba22d6e1cbf4ab44a9cc21f74992f0e0f2bc40507d094fbe5695e6bb0f946cd4837b39988f036cf695084c73ad254cd9ff4566d9cffe1cf5fa07448a7cf6d44f1d67fb4fd5ac3acf7d76262fa466235dcd0dd368fc47fc6c8d74c307f35c3240c83b00c2208fcbbc0a90b53e7eb98748a52f9872683582beaf3a4ccaa073bd64c68dd9ec79275d6357b3e8fbeb4466897a4a6ddc026ae06000000000000000af2fe0333d945aaf83f3dd80e97bdd37dff64573462594992e18240c43e74fecaa1062aebd1b5089e1a4f9718b611f48fc249c4a32646e08a41e160edc2cbe7ae365532fa0ac3933c404a7af6a2a119aaab947edaf553d89432131298c90f1e9d974440c1a87209e976dbe1781e28bee66b37b2d1b14459315a4ea9d44b225660973c8c0d02ecb6c2d6ddb65f0a04e7bd4d3b0bf7c878511277c564cb961cc4e4b239e8b3c5885d52f9db8bea5be98ce575a067712a737307a06512352dc3054c8fe1d502ba8dafcd6fd44d6950fd8152703e8afa7984821b373dd2ef9572449a5aba6f33cc3e061a2f8227b019c357519f6b5ff21f62b856608c249c71501dde3828db4beeb83f4337e2fcf860a2cb8ee528"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) r0 = dup(0xffffffffffffffff) statx(r0, 0x0, 0x0, 0x80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'memory'}]}, 0x1a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:15:39 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700), 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:39 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:39 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1083.212615] f2fs_msg: 1 callbacks suppressed [ 1083.212640] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1083.235044] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1083.252305] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 1083.263274] attempt to access beyond end of device [ 1083.268507] loop0: rw=12288, want=8200, limit=20 [ 1083.274884] F2FS-fs (loop0): invalid crc value [ 1083.285452] attempt to access beyond end of device [ 1083.292664] loop0: rw=12288, want=12296, limit=20 06:15:39 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1083.333933] F2FS-fs (loop0): invalid crc value 06:15:39 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700), 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1083.463259] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 06:15:39 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:39 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1083.525760] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1083.554630] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1083.586867] attempt to access beyond end of device 06:15:39 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1083.633261] loop0: rw=12288, want=8200, limit=20 [ 1083.638568] F2FS-fs (loop0): invalid crc value [ 1083.664206] attempt to access beyond end of device [ 1083.684097] loop0: rw=12288, want=12296, limit=20 [ 1083.793039] F2FS-fs (loop0): invalid crc value 06:15:40 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) r0 = dup(0xffffffffffffffff) statx(r0, 0x0, 0x0, 0x80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'memory'}]}, 0x1a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 06:15:40 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:15:40 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1084.282716] attempt to access beyond end of device [ 1084.292766] loop0: rw=12288, want=8200, limit=20 [ 1084.298618] attempt to access beyond end of device [ 1084.304281] loop0: rw=12288, want=12296, limit=20 [ 1084.316072] attempt to access beyond end of device [ 1084.322723] loop0: rw=12288, want=8200, limit=20 [ 1084.328903] attempt to access beyond end of device [ 1084.335200] loop0: rw=12288, want=12296, limit=20 06:15:40 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:40 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1084.605195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.622822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.652720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.677245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.704567] device bridge_slave_1 left promiscuous mode [ 1084.724106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.802703] device bridge_slave_0 left promiscuous mode [ 1084.865464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.003317] device veth1_macvtap left promiscuous mode [ 1085.017240] device veth0_macvtap left promiscuous mode [ 1085.050229] device veth1_vlan left promiscuous mode [ 1085.055345] device veth0_vlan left promiscuous mode [ 1085.263239] device hsr_slave_1 left promiscuous mode [ 1085.303915] device hsr_slave_0 left promiscuous mode [ 1085.356688] team0 (unregistering): Port device team_slave_1 removed [ 1085.381226] team0 (unregistering): Port device team_slave_0 removed [ 1085.409227] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1085.459037] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1085.594848] bond0 (unregistering): Released all slaves [ 1087.501800] IPVS: ftp: loaded support on port[0] = 21 [ 1088.282292] IPVS: ftp: loaded support on port[0] = 21 [ 1088.317797] chnl_net:caif_netlink_parms(): no params data found [ 1088.445423] chnl_net:caif_netlink_parms(): no params data found [ 1088.454351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.460940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.468242] device bridge_slave_0 entered promiscuous mode [ 1088.481030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.487471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.494823] device bridge_slave_1 entered promiscuous mode [ 1088.524853] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1088.539758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1088.566210] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1088.573706] team0: Port device team_slave_0 added [ 1088.582533] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1088.589943] team0: Port device team_slave_1 added [ 1088.613594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.620721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.646077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.662482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.669046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.694338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.711371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.717798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.725415] device bridge_slave_0 entered promiscuous mode [ 1088.732382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1088.739659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.746239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.753541] device bridge_slave_1 entered promiscuous mode [ 1088.762688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1088.842794] device hsr_slave_0 entered promiscuous mode [ 1088.880459] device hsr_slave_1 entered promiscuous mode [ 1088.921824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1088.929889] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1088.938436] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1088.946440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1088.982297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1088.989790] team0: Port device team_slave_0 added [ 1088.998882] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1089.006545] team0: Port device team_slave_1 added [ 1089.034677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.041065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.066425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.081149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.087410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.114507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.129017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1089.138071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1089.232738] device hsr_slave_0 entered promiscuous mode [ 1089.270460] device hsr_slave_1 entered promiscuous mode [ 1089.314183] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1089.322057] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1089.363375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1089.453154] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1089.462247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.474354] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1089.484832] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1089.494682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1089.502019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1089.510796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1089.517020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.527607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1089.536577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.547105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.554882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.561634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.569265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1089.581155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1089.591864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1089.599409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.607823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.615701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.622143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.629526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1089.646169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1089.654561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1089.666296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1089.675442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1089.683994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1089.692465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1089.704410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1089.713415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1089.722391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1089.732898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1089.739821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1089.748209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1089.763446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1089.775500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.782630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1089.793099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1089.802952] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1089.809009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1089.819610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1089.831185] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1089.839026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1089.846409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1089.858111] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1089.868381] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1089.874792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.882945] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1089.890581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1089.897530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1089.908272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1089.916973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.925937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.934097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.940525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.949540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1089.959642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1089.968082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.976848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.985330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.991773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.001431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.015142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1090.022870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1090.037420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1090.045391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1090.060910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1090.067912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1090.076723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1090.087777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1090.096750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1090.105705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1090.114803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1090.125628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1090.136949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1090.147002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1090.162480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1090.171822] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1090.179561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1090.187860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1090.199941] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1090.206590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1090.217107] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1090.231380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1090.242974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1090.256178] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1090.265155] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1090.272001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1090.278787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1090.293968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.307447] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1090.315471] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1090.322595] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1090.338730] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1090.345512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1090.354502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1090.363225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1090.370871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1090.380611] device veth0_vlan entered promiscuous mode [ 1090.394597] device veth1_vlan entered promiscuous mode [ 1090.422079] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1090.438045] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1090.445461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1090.454663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1090.466108] device veth0_macvtap entered promiscuous mode [ 1090.473821] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1090.482563] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1090.491842] device veth1_macvtap entered promiscuous mode [ 1090.498017] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1090.508004] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1090.520982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1090.528905] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1090.536389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1090.544524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1090.552707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1090.566086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1090.576283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1090.586281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.597275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1090.607399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.617067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1090.626997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.637873] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1090.645433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.655474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1090.664524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1090.674759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1090.684766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.694527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1090.704625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.713864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1090.723939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.735076] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1090.742835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.753310] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1090.761712] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1090.768533] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1090.775312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1090.784110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1090.803121] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1090.814492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1090.823214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1090.837968] device veth0_vlan entered promiscuous mode [ 1090.844556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1090.852016] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1090.867223] device veth1_vlan entered promiscuous mode [ 1090.874358] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1090.887322] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1090.904294] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1090.915683] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1090.923048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1090.931910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1090.939294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1090.947624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1090.958466] device veth0_macvtap entered promiscuous mode [ 1090.965587] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1090.976307] device veth1_macvtap entered promiscuous mode [ 1090.983184] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1090.998796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1091.015891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1091.026427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1091.037540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.046957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1091.056980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.066388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1091.076214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.085408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1091.095533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.105905] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1091.113249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.124231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1091.132329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1091.139694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1091.147769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1091.157925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1091.168323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.178327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1091.188187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.197584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1091.207539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.216898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1091.227074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.242414] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1091.249325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.258134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1091.266774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:15:48 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) r0 = dup(0xffffffffffffffff) statx(r0, 0x0, 0x0, 0x80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'memory'}]}, 0x1a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 06:15:48 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:48 executing program 5: getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1092.711971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26127 comm=syz-executor.1 [ 1092.715458] f2fs_msg: 12 callbacks suppressed [ 1092.715487] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1092.933458] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1092.976537] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 1093.027611] attempt to access beyond end of device [ 1093.045959] loop0: rw=12288, want=8200, limit=20 [ 1093.063549] F2FS-fs (loop0): invalid crc value [ 1093.075665] attempt to access beyond end of device [ 1093.086224] loop0: rw=12288, want=12296, limit=20 [ 1093.100812] F2FS-fs (loop0): invalid crc value [ 1093.105599] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 1093.114464] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1093.121868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1093.131380] attempt to access beyond end of device [ 1093.136431] loop0: rw=12288, want=8200, limit=20 [ 1093.141603] F2FS-fs (loop0): invalid crc value [ 1093.146750] attempt to access beyond end of device [ 1093.152214] loop0: rw=12288, want=12296, limit=20 [ 1093.157352] F2FS-fs (loop0): invalid crc value 06:15:49 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:49 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:15:49 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:49 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed8a60ab563e98b4b2a3d27a7082dbb78abd509ba3da80b856445ab100621d623f543bef2d9f066eb86cd89e9b08e3f5972fe9ca162b123e19291092c88150c5f827b8e68c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d6679079d0000000000000000000000c2beec92979184e4ca09b275c3208f0a208aa34fafdb887631862b01b60831770d434632295fb07277a2b99e55c21ec800c13afd7f7c21e0c9adf876e8e53a3f64b426e61ea9d7a0aadb4a118192c88d4cc4c3ed804fbdebdbc852d3cc5fc1cbb6d44480546e870b2e9114ad47f6034a20d80b49ae16d5e2a459c5ef46ddab31c7c2c43a27d1def9da9adbb893ee35df75a75e3a0f78776a86b813c1a039c1e0c71f90185f5faaa8b2f7c4016284dcebeba22d6e1cbf4ab44a9cc21f74992f0e0f2bc40507d094fbe5695e6bb0f946cd4837b39988f036cf695084c73ad254cd9ff4566d9cffe1cf5fa07448a7cf6d44f1d67fb4fd5ac3acf7d76262fa466235dcd0dd368fc47fc6c8d74c307f35c3240c83b00c2208fcbbc0a90b53e7eb98748a52f9872683582beaf3a4ccaa073bd64c68dd9ec79275d6357b3e8fbeb4466897a4a6ddc026ae06000000000000000af2fe0333d945aaf83f3dd80e97bdd37dff64573462594992e18240c43e74fecaa1062aebd1b5089e1a4f9718b611f48fc249c4a32646e08a41e160edc2cbe7ae365532fa0ac3933c404a7af6a2a119aaab947edaf553d89432131298c90f1e9d974440c1a87209e976dbe1781e28bee66b37b2d1b14459315a4ea9d44b225660973c8c0d02ecb6c2d6ddb65f0a04e7bd4d3b0bf7c878511277c564cb961cc4e4b239e8b3c5885d52f9db8bea5be98ce575a067712a737307a06512352dc3054c8fe1d502ba8dafcd6fd44d6950fd8152703e8afa7984821b373dd2ef9572449a5aba6f33cc3e061a2f8227b019c357519f6b5ff21f62b856608c249c71501dde3828db4beeb83f4337e2fcf860a2cb8ee528"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) r0 = dup(0xffffffffffffffff) statx(r0, 0x0, 0x0, 0x80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'memory'}]}, 0x1a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1093.492687] attempt to access beyond end of device 06:15:49 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:49 executing program 5: getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1093.682648] loop0: rw=12288, want=8200, limit=20 06:15:50 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1093.713400] attempt to access beyond end of device [ 1093.740579] loop0: rw=12288, want=12296, limit=20 [ 1093.773415] attempt to access beyond end of device [ 1093.796290] loop0: rw=12288, want=8200, limit=20 [ 1093.813080] attempt to access beyond end of device [ 1093.825676] loop0: rw=12288, want=12296, limit=20 [ 1093.852343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.859114] batman_adv: batadv0: Removing interface: batadv_slave_0 06:15:50 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1094.066020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.104772] batman_adv: batadv0: Removing interface: batadv_slave_1 06:15:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000300), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed8a60ab563e98b4b2a3d27a7082dbb78abd509ba3da80b856445ab100621d623f543bef2d9f066eb86cd89e9b08e3f5972fe9ca162b123e19291092c88150c5f827b8e68c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d6679079d0000000000000000000000c2beec92979184e4ca09b275c3208f0a208aa34fafdb887631862b01b60831770d434632295fb07277a2b99e55c21ec800c13afd7f7c21e0c9adf876e8e53a3f64b426e61ea9d7a0aadb4a118192c88d4cc4c3ed804fbdebdbc852d3cc5fc1cbb6d44480546e870b2e9114ad47f6034a20d80b49ae16d5e2a459c5ef46ddab31c7c2c43a27d1def9da9adbb893ee35df75a75e3a0f78776a86b813c1a039c1e0c71f90185f5faaa8b2f7c4016284dcebeba22d6e1cbf4ab44a9cc21f74992f0e0f2bc40507d094fbe5695e6bb0f946cd4837b39988f036cf695084c73ad254cd9ff4566d9cffe1cf5fa07448a7cf6d44f1d67fb4fd5ac3acf7d76262fa466235dcd0dd368fc47fc6c8d74c307f35c3240c83b00c2208fcbbc0a90b53e7eb98748a52f9872683582beaf3a4ccaa073bd64c68dd9ec79275d6357b3e8fbeb4466897a4a6ddc026ae06000000000000000af2fe0333d945aaf83f3dd80e97bdd37dff64573462594992e18240c43e74fecaa1062aebd1b5089e1a4f9718b611f48fc249c4a32646e08a41e160edc2cbe7ae365532fa0ac3933c404a7af6a2a119aaab947edaf553d89432131298c90f1e9d974440c1a87209e976dbe1781e28bee66b37b2d1b14459315a4ea9d44b225660973c8c0d02ecb6c2d6ddb65f0a04e7bd4d3b0bf7c878511277c564cb961cc4e4b239e8b3c5885d52f9db8bea5be98ce575a067712a737307a06512352dc3054c8fe1d502ba8dafcd6fd44d6950fd8152703e8afa7984821b373dd2ef9572449a5aba6f33cc3e061a2f8227b019c357519f6b5ff21f62b856608c249c71501dde3828db4beeb83f4337e2fcf860a2cb8ee528"], 0x2e6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[], 0x0) r0 = dup(0xffffffffffffffff) statx(r0, 0x0, 0x0, 0x80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'memory'}]}, 0x1a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1094.134417] device bridge_slave_1 left promiscuous mode [ 1094.148885] bridge0: port 2(bridge_slave_1) entered disabled state 06:15:50 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1094.201162] device bridge_slave_0 left promiscuous mode [ 1094.209173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.432060] device veth1_macvtap left promiscuous mode [ 1094.448253] device veth0_macvtap left promiscuous mode [ 1094.462010] attempt to access beyond end of device [ 1094.465339] device veth1_vlan left promiscuous mode 06:15:50 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1094.479316] loop0: rw=12288, want=8200, limit=20 06:15:50 executing program 5: getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1094.503171] attempt to access beyond end of device [ 1094.505338] device veth0_vlan left promiscuous mode [ 1094.534013] loop0: rw=12288, want=12296, limit=20 [ 1094.574699] attempt to access beyond end of device [ 1094.588897] loop0: rw=12288, want=8200, limit=20 [ 1094.605222] attempt to access beyond end of device [ 1094.614935] loop0: rw=12288, want=12296, limit=20 06:15:51 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:15:51 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1095.394884] device hsr_slave_1 left promiscuous mode [ 1095.424293] device hsr_slave_0 left promiscuous mode [ 1095.482692] team0 (unregistering): Port device team_slave_1 removed [ 1095.505110] team0 (unregistering): Port device team_slave_0 removed [ 1095.517214] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1095.565561] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1095.663742] bond0 (unregistering): Released all slaves [ 1097.831850] IPVS: ftp: loaded support on port[0] = 21 [ 1098.666348] chnl_net:caif_netlink_parms(): no params data found [ 1098.730747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.737171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.744363] device bridge_slave_0 entered promiscuous mode [ 1098.752844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.759249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.766509] device bridge_slave_1 entered promiscuous mode [ 1098.786934] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1098.796477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1098.823738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1098.831579] team0: Port device team_slave_0 added [ 1098.837323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1098.844843] team0: Port device team_slave_1 added [ 1098.866304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.872673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.898061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.909076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.915750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.941125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.951903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1098.963598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1099.022789] device hsr_slave_0 entered promiscuous mode [ 1099.070572] device hsr_slave_1 entered promiscuous mode [ 1099.124105] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1099.131789] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1099.214824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.221234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.227849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.235834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.278612] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1099.285394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.294666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1099.305681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1099.313292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.320475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.333224] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1099.340662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.349769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1099.357659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.364040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.380784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1099.388444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.394845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.412736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1099.421502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1099.429309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1099.442065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1099.453044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1099.464828] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1099.471138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1099.487015] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1099.495337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1099.503014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1099.512536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.519270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.527946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.534735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.543370] device bridge_slave_1 left promiscuous mode [ 1099.548880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.601088] device bridge_slave_0 left promiscuous mode [ 1099.606720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.663804] device veth1_macvtap left promiscuous mode [ 1099.669155] device veth0_macvtap left promiscuous mode [ 1099.674792] device veth1_vlan left promiscuous mode [ 1099.679862] device veth0_vlan left promiscuous mode [ 1099.822815] device hsr_slave_1 left promiscuous mode [ 1099.874774] device hsr_slave_0 left promiscuous mode [ 1099.928073] team0 (unregistering): Port device team_slave_1 removed [ 1099.938078] team0 (unregistering): Port device team_slave_0 removed [ 1099.947739] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1099.984196] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1100.060972] bond0 (unregistering): Released all slaves [ 1100.128039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.138195] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1100.201790] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1100.215122] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1100.223156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1100.232025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1100.284790] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1100.296527] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1100.303972] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1100.319051] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1100.326579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1100.338531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1100.349635] device veth0_vlan entered promiscuous mode [ 1100.359624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1100.367919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1100.384764] device veth1_vlan entered promiscuous mode [ 1100.396020] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1100.409067] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1100.428657] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1100.444750] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1100.455216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1100.463576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1100.475272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1100.484080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1100.498898] device veth0_macvtap entered promiscuous mode [ 1100.506672] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1100.518562] device veth1_macvtap entered promiscuous mode [ 1100.525596] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1100.537518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1100.552657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1100.562944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.572956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.583826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.596191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.607152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.619180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.635151] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1100.643099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.656321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1100.665322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1100.675843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1100.684640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1100.699433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1100.709881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.719868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1100.730486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.739632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1100.750188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.761267] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1100.768492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.776250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1100.785748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1102.001206] IPVS: ftp: loaded support on port[0] = 21 06:15:58 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:15:58 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1102.653322] chnl_net:caif_netlink_parms(): no params data found [ 1102.729487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.736475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.744516] device bridge_slave_0 entered promiscuous mode [ 1102.752455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.759045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.767339] device bridge_slave_1 entered promiscuous mode [ 1102.792626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1102.806330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1102.829875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1102.837451] team0: Port device team_slave_0 added [ 1102.851334] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1102.858801] team0: Port device team_slave_1 added [ 1102.893028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.899442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.926473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.937785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.944147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.969580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.980925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1102.988691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1103.042865] device hsr_slave_0 entered promiscuous mode [ 1103.090439] device hsr_slave_1 entered promiscuous mode [ 1103.144102] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1103.151844] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1103.236245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.242799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.249584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.256012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.297377] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1103.303947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.318615] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1103.328698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.336259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.343109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.353861] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1103.361207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.376555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.384559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.390979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.403218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.411107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.417468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.439381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.447762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1103.457911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.473860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1103.487634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.498886] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1103.505532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1103.512932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1103.527071] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1103.535322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1103.548682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1103.563874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.572506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.580285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.587681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.595588] device bridge_slave_1 left promiscuous mode [ 1103.601410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.640818] device bridge_slave_0 left promiscuous mode [ 1103.646406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.703373] device veth1_macvtap left promiscuous mode [ 1103.708712] device veth0_macvtap left promiscuous mode [ 1103.714372] device veth1_vlan left promiscuous mode [ 1103.719436] device veth0_vlan left promiscuous mode [ 1103.842286] device hsr_slave_1 left promiscuous mode [ 1103.894475] device hsr_slave_0 left promiscuous mode [ 1103.940735] team0 (unregistering): Port device team_slave_1 removed [ 1103.950636] team0 (unregistering): Port device team_slave_0 removed [ 1103.959886] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1104.005531] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1104.081828] bond0 (unregistering): Released all slaves [ 1104.129033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.136636] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1104.208264] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1104.218030] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1104.225869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1104.234549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1104.310882] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1104.318066] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1104.329588] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1104.345598] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1104.352561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1104.364775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1104.374938] device veth0_vlan entered promiscuous mode [ 1104.386002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1104.394595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1104.412075] device veth1_vlan entered promiscuous mode [ 1104.418356] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1104.434581] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1104.455177] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1104.471138] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1104.478105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1104.491126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1104.498552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1104.511271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1104.528296] device veth0_macvtap entered promiscuous mode [ 1104.535456] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1104.549895] device veth1_macvtap entered promiscuous mode [ 1104.557497] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1104.573266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1104.588069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1104.598958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1104.612945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.623176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1104.636157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.646279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1104.659463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.671441] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1104.678511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.693180] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1104.705197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1104.724643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1104.737671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1104.748131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1104.762866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.774170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1104.786456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.797097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1104.810117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.825383] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1104.832808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.844396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1104.853264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1106.084697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26337 comm=syz-executor.1 06:16:03 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:03 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:03 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:03 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:03 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:03 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:03 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:03 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:03 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x5c}}, 0x0) 06:16:03 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="24000000560007031dfffd946f610500070000040000000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 06:16:03 executing program 0: msgrcv(0x0, &(0x7f0000001200)={0x0, ""/236}, 0xf4, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) 06:16:03 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:04 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r5, 0x3, 0x0, 0x0) lseek(r5, 0x0, 0x3) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) open(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x141842, 0x0) [ 1108.072054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.078855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.109649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.124287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.144657] device bridge_slave_1 left promiscuous mode [ 1108.157098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.220987] device bridge_slave_0 left promiscuous mode [ 1108.227822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.283470] device veth1_macvtap left promiscuous mode [ 1108.292326] device veth0_macvtap left promiscuous mode [ 1108.303324] device veth1_vlan left promiscuous mode [ 1108.315150] device veth0_vlan left promiscuous mode [ 1108.563297] device hsr_slave_1 left promiscuous mode [ 1108.615002] device hsr_slave_0 left promiscuous mode [ 1108.723495] team0 (unregistering): Port device team_slave_1 removed [ 1108.734826] team0 (unregistering): Port device team_slave_0 removed [ 1108.745789] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1108.794480] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1108.907740] bond0 (unregistering): Released all slaves [ 1110.791822] IPVS: ftp: loaded support on port[0] = 21 [ 1111.676368] IPVS: ftp: loaded support on port[0] = 21 [ 1111.724764] chnl_net:caif_netlink_parms(): no params data found [ 1111.849443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.855979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.865258] device bridge_slave_0 entered promiscuous mode [ 1111.888132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.894740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.902071] device bridge_slave_1 entered promiscuous mode [ 1111.921366] chnl_net:caif_netlink_parms(): no params data found [ 1111.947082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1111.957305] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1111.988313] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1111.995937] team0: Port device team_slave_0 added [ 1112.002265] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1112.009554] team0: Port device team_slave_1 added [ 1112.031208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.037501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.063830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.076439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.082816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.108256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.124422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1112.132424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1112.158108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.165109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.174635] device bridge_slave_0 entered promiscuous mode [ 1112.234704] device hsr_slave_0 entered promiscuous mode [ 1112.290837] device hsr_slave_1 entered promiscuous mode [ 1112.340434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.346838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.356310] device bridge_slave_1 entered promiscuous mode [ 1112.363214] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1112.371327] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1112.399389] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1112.416509] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1112.447825] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1112.457598] team0: Port device team_slave_0 added [ 1112.466820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1112.474654] team0: Port device team_slave_1 added [ 1112.506886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.513324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.540189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.555904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.562283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.588640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.607742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1112.618559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1112.684996] device hsr_slave_0 entered promiscuous mode [ 1112.740615] device hsr_slave_1 entered promiscuous mode [ 1112.792569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1112.805747] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1112.824874] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1112.919809] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1112.936612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.947596] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1112.958474] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1112.965467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1112.974978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1112.985176] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1112.991730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.003298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1113.011689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1113.019641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1113.027638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.034075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.044343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1113.052198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1113.059487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1113.067808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1113.076196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.082615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.105845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.115994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1113.126035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1113.136001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1113.145911] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1113.155748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1113.162948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1113.170713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1113.178092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1113.188971] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1113.195450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.205085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1113.213582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1113.222803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1113.231295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1113.240771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1113.249980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1113.257643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1113.266182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1113.274063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.280499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.287664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1113.295695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1113.303601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.310206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.318321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1113.330651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1113.337774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1113.348658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1113.358544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1113.365744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1113.373922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1113.381761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1113.391799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1113.400723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1113.408312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1113.418374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1113.426567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1113.437546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1113.444945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1113.453380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1113.461076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1113.468901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1113.476818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1113.484789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1113.495681] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1113.502415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1113.509768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1113.518298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1113.528199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1113.536612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1113.548448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1113.556429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1113.565854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1113.578768] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1113.588220] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1113.595475] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1113.602903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1113.609964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1113.617414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1113.631888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.654527] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1113.663386] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1113.669904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1113.677370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1113.691330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.773864] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1113.787108] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1113.795535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1113.804108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1113.816555] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1113.828117] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1113.835894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1113.844635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1113.888535] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1113.896935] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1113.904621] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1113.914778] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1113.922708] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1113.929627] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1113.941329] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1113.949306] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1113.956319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1113.963994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.972176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1113.979665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.988030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1113.996079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1114.003625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1114.010995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1114.023405] device veth0_vlan entered promiscuous mode [ 1114.029352] device veth0_vlan entered promiscuous mode [ 1114.044664] device veth1_vlan entered promiscuous mode [ 1114.050769] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1114.058271] device veth1_vlan entered promiscuous mode [ 1114.065560] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1114.082232] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1114.090964] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1114.106894] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1114.118055] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1114.126111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1114.134273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1114.142133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1114.149702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1114.158409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1114.166666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1114.177948] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1114.188852] device veth0_macvtap entered promiscuous mode [ 1114.195686] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1114.205748] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1114.215543] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1114.223163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1114.231473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1114.241876] device veth0_macvtap entered promiscuous mode [ 1114.248228] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1114.255706] device veth1_macvtap entered promiscuous mode [ 1114.264976] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1114.276566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1114.288690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1114.296564] device veth1_macvtap entered promiscuous mode [ 1114.305027] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1114.317121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1114.325336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1114.335657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.344886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1114.354842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.364064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1114.373977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.384160] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1114.392151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.402408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1114.409697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1114.417545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1114.425052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1114.433494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1114.443913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1114.452249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1114.462141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.471643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1114.481829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.491047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1114.500818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.511548] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1114.518705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.528066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1114.536107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1114.547299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1114.557305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.566705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1114.577203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.590689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1114.603216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.613603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1114.623387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.641919] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1114.650359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.662307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1114.670587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1114.681070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1114.691272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.701661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1114.711805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.722760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1114.734455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.744082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1114.753852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.764222] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1114.771400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.782443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1114.791741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1116.213188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26513 comm=syz-executor.1 06:16:13 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:13 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2}, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x6}) 06:16:13 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:13 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:13 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:13 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) getuid() stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000200)={0xfffffffe}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r7, r8, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:16:13 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:13 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:13 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:13 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:13 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:14 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:14 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:14 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mlockall(0x1) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sysfs$2(0x2, 0x1f, &(0x7f00000002c0)=""/165) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x8400}, 0x0) getresgid(0x0, &(0x7f0000001e00), &(0x7f0000001e40)) 06:16:14 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1118.343817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.375201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.399193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.414167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.433712] device bridge_slave_1 left promiscuous mode [ 1118.446153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.764630] device bridge_slave_0 left promiscuous mode [ 1118.772686] bridge0: port 1(bridge_slave_0) entered disabled state 06:16:15 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:15 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1118.863063] device veth1_macvtap left promiscuous mode [ 1118.868536] device veth0_macvtap left promiscuous mode [ 1118.900368] device veth1_vlan left promiscuous mode 06:16:15 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1118.920299] device veth0_vlan left promiscuous mode 06:16:15 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1119.818331] device hsr_slave_1 left promiscuous mode [ 1119.899209] device hsr_slave_0 left promiscuous mode [ 1119.976823] team0 (unregistering): Port device team_slave_1 removed [ 1120.006286] team0 (unregistering): Port device team_slave_0 removed [ 1120.020289] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1120.064987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1120.184037] bond0 (unregistering): Released all slaves [ 1122.201939] IPVS: ftp: loaded support on port[0] = 21 [ 1122.989802] IPVS: ftp: loaded support on port[0] = 21 [ 1123.068603] chnl_net:caif_netlink_parms(): no params data found [ 1123.191111] chnl_net:caif_netlink_parms(): no params data found [ 1123.228604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.235547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.242857] device bridge_slave_0 entered promiscuous mode [ 1123.254653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.261179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.268468] device bridge_slave_1 entered promiscuous mode [ 1123.301444] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1123.311833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1123.337475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1123.345411] team0: Port device team_slave_0 added [ 1123.356549] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1123.364624] team0: Port device team_slave_1 added [ 1123.394711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.402028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.409102] device bridge_slave_0 entered promiscuous mode [ 1123.421278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.427683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.453754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.464037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.470775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.477957] device bridge_slave_1 entered promiscuous mode [ 1123.485363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.491822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.520112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.538796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1123.556749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1123.573291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1123.588915] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1123.654716] device hsr_slave_0 entered promiscuous mode [ 1123.700602] device hsr_slave_1 entered promiscuous mode [ 1123.753130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1123.760823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1123.768085] team0: Port device team_slave_0 added [ 1123.774861] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1123.782225] team0: Port device team_slave_1 added [ 1123.787796] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1123.825627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.832290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.858050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.880935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.887223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.913119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.924958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1123.939388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1124.012910] device hsr_slave_0 entered promiscuous mode [ 1124.050476] device hsr_slave_1 entered promiscuous mode [ 1124.094243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1124.109936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1124.147573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.154493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.162190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.169032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.177713] device bridge_slave_1 left promiscuous mode [ 1124.183320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.241043] device bridge_slave_0 left promiscuous mode [ 1124.246578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.302279] device veth1_macvtap left promiscuous mode [ 1124.307740] device veth0_macvtap left promiscuous mode [ 1124.313656] device veth1_vlan left promiscuous mode [ 1124.318755] device veth0_vlan left promiscuous mode [ 1124.473983] device hsr_slave_1 left promiscuous mode [ 1124.524660] device hsr_slave_0 left promiscuous mode [ 1124.569646] team0 (unregistering): Port device team_slave_1 removed [ 1124.579400] team0 (unregistering): Port device team_slave_0 removed [ 1124.588955] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1124.635155] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1124.711023] bond0 (unregistering): Released all slaves [ 1124.818108] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1124.866664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1124.887663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.898955] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1124.909927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1124.917575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1124.924926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1124.936697] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1124.942898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.986461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1124.995934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1125.008746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1125.016586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.023002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.031145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1125.041007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1125.057460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1125.067387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1125.080699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1125.088571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.096087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.107823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1125.139349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1125.147682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1125.168042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.184315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1125.198593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1125.207457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1125.222891] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1125.237591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1125.245289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1125.258009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1125.266263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1125.283829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1125.298400] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1125.307183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1125.320684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1125.328499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1125.341139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1125.351404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1125.366907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1125.379554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.386596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1125.399221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1125.408560] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1125.419897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1125.435631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1125.442994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1125.456278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1125.464219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.470623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.484222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1125.496206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1125.508083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1125.519228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1125.533209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.539653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.554334] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1125.566072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1125.575879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1125.591675] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1125.608965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1125.617116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1125.629697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1125.636813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1125.654304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.668760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1125.680218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1125.688954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1125.699668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1125.712893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1125.722627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1125.732231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1125.741589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1125.755345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1125.763558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1125.773285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1125.781035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1125.788781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1125.800960] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1125.807241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1125.828347] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1125.837356] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1125.847015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1125.855089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1125.874502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.891930] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1125.903605] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1125.911470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1125.919816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1125.979466] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1125.989894] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1125.997835] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1126.008604] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1126.016069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1126.024723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1126.035122] device veth0_vlan entered promiscuous mode [ 1126.041814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1126.049903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1126.072879] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1126.087311] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1126.098186] device veth1_vlan entered promiscuous mode [ 1126.104839] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1126.111923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1126.119494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1126.127927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1126.142912] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1126.150636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1126.168043] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1126.181772] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1126.189234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1126.198186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1126.212855] device veth0_macvtap entered promiscuous mode [ 1126.219132] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1126.229327] device veth1_macvtap entered promiscuous mode [ 1126.236564] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1126.248327] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1126.261095] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1126.268150] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1126.281997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1126.293532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1126.304031] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1126.313875] device veth0_vlan entered promiscuous mode [ 1126.320890] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1126.328375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1126.336207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1126.343920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1126.354224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.364667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.374877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.385607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.395663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.405658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.417111] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1126.424370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.437228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1126.444480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1126.452038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1126.459852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1126.469558] device veth1_vlan entered promiscuous mode [ 1126.477880] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1126.484895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1126.495594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.505629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1126.515380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.524583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1126.534370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.544762] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1126.552825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.560632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1126.567917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1126.575921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1126.587177] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1126.605741] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1126.621871] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1126.629160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1126.638070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1126.646829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1126.657453] device veth0_macvtap entered promiscuous mode [ 1126.665304] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1126.680563] device veth1_macvtap entered promiscuous mode [ 1126.687268] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1126.698398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1126.725477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1126.739911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.754829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.764197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.774388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.783879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.793895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.803351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1126.813217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.823384] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1126.831074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.840899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1126.848345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1126.856277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1126.864154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1126.874634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1126.884854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.894536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1126.905073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.914488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1126.924296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.934218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1126.945730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.956746] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1126.964272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.976409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1126.984828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1128.428578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26730 comm=syz-executor.1 06:16:25 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:25 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mlockall(0x1) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sysfs$2(0x2, 0x1f, &(0x7f00000002c0)=""/165) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x8400}, 0x0) getresgid(0x0, &(0x7f0000001e00), &(0x7f0000001e40)) 06:16:25 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:25 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:25 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:25 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:25 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:25 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:25 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:26 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, 0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:26 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:26 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) [ 1130.102714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.109639] batman_adv: batadv0: Removing interface: batadv_slave_0 06:16:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mlockall(0x1) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sysfs$2(0x2, 0x1f, &(0x7f00000002c0)=""/165) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x8400}, 0x0) getresgid(0x0, &(0x7f0000001e00), &(0x7f0000001e40)) 06:16:26 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, 0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1130.291092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.297999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.339024] device bridge_slave_1 left promiscuous mode [ 1130.354310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.401433] device bridge_slave_0 left promiscuous mode [ 1130.408004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.655396] device veth1_macvtap left promiscuous mode [ 1130.688583] device veth0_macvtap left promiscuous mode 06:16:27 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, 0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:27 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1130.822345] device veth1_vlan left promiscuous mode [ 1130.834884] device veth0_vlan left promiscuous mode 06:16:27 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) [ 1131.394301] device hsr_slave_1 left promiscuous mode [ 1131.455498] device hsr_slave_0 left promiscuous mode [ 1131.536663] team0 (unregistering): Port device team_slave_1 removed [ 1131.563721] team0 (unregistering): Port device team_slave_0 removed [ 1131.602397] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1131.627306] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1131.752353] bond0 (unregistering): Released all slaves [ 1133.741115] IPVS: ftp: loaded support on port[0] = 21 [ 1134.500871] IPVS: ftp: loaded support on port[0] = 21 [ 1134.584463] chnl_net:caif_netlink_parms(): no params data found [ 1134.692046] chnl_net:caif_netlink_parms(): no params data found [ 1134.747369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.754155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.762141] device bridge_slave_0 entered promiscuous mode [ 1134.775765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.782871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.789942] device bridge_slave_1 entered promiscuous mode [ 1134.818476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1134.828697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1134.858763] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1134.866393] team0: Port device team_slave_0 added [ 1134.872621] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1134.879892] team0: Port device team_slave_1 added [ 1134.913892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.920292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.946449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.958260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.964683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.990046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.999977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.006972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.014153] device bridge_slave_0 entered promiscuous mode [ 1135.022037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.028603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.035915] device bridge_slave_1 entered promiscuous mode [ 1135.042469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1135.060317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1135.083311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1135.095368] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1135.153283] device hsr_slave_0 entered promiscuous mode [ 1135.200474] device hsr_slave_1 entered promiscuous mode [ 1135.252249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1135.259489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1135.266769] team0: Port device team_slave_0 added [ 1135.273109] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1135.281121] team0: Port device team_slave_1 added [ 1135.286402] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1135.316861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.323367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.348704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.367914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.374287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.399595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.416154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1135.424286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1135.493317] device hsr_slave_0 entered promiscuous mode [ 1135.530382] device hsr_slave_1 entered promiscuous mode [ 1135.586539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.593500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.602101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.608814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.616708] device bridge_slave_1 left promiscuous mode [ 1135.622430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.660838] device bridge_slave_0 left promiscuous mode [ 1135.666622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.723126] device veth1_macvtap left promiscuous mode [ 1135.728673] device veth0_macvtap left promiscuous mode [ 1135.734253] device veth1_vlan left promiscuous mode [ 1135.739327] device veth0_vlan left promiscuous mode [ 1135.863327] device hsr_slave_1 left promiscuous mode [ 1135.923142] device hsr_slave_0 left promiscuous mode [ 1135.969729] team0 (unregistering): Port device team_slave_1 removed [ 1135.979922] team0 (unregistering): Port device team_slave_0 removed [ 1135.989447] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1136.053299] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1136.123750] bond0 (unregistering): Released all slaves [ 1136.165064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1136.175857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1136.259239] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1136.357992] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1136.425953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.457111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1136.477724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.485390] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1136.492282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1136.499391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1136.510683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1136.522143] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1136.531846] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1136.537974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.545349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1136.553324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1136.564268] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1136.574880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.583667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1136.596036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1136.605254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1136.618258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.624847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.641483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1136.652837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1136.665256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1136.673346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1136.686379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1136.694232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.700649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.715380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1136.725699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1136.736097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.742506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.754848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1136.768378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1136.777952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1136.788818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1136.799511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1136.813469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.819991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.829670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1136.846436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1136.858964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1136.869587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1136.881062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1136.893871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1136.908906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1136.917188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1136.931266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1136.939198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1136.955563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1136.969416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1136.979732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1136.993208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1137.001335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1137.009048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1137.017585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1137.028104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1137.040283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1137.049715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1137.058157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1137.067012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1137.074939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1137.084364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1137.093309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1137.104027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1137.112158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1137.127196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1137.135150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1137.144939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1137.161241] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1137.167381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1137.177651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1137.187120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.197805] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1137.204180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1137.218063] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1137.225246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1137.232886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1137.248721] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1137.255684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1137.264151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1137.272744] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1137.281949] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1137.288917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1137.296025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1137.307503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.319267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.418032] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1137.429385] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1137.441577] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1137.449831] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1137.463167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1137.477793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1137.486271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1137.494799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1137.535359] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1137.543818] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1137.551164] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1137.564402] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1137.576812] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1137.584348] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1137.597493] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1137.605799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1137.613840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1137.629272] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1137.644977] device veth0_vlan entered promiscuous mode [ 1137.655436] device veth1_vlan entered promiscuous mode [ 1137.662220] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1137.669088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1137.677375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1137.684837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1137.692811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1137.700869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1137.709542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1137.716893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1137.727636] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1137.734749] device veth0_vlan entered promiscuous mode [ 1137.752040] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1137.765404] device veth1_vlan entered promiscuous mode [ 1137.772721] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1137.784083] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1137.796305] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1137.805674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1137.813579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1137.821191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1137.828685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1137.837101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1137.850617] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1137.858264] device veth0_macvtap entered promiscuous mode [ 1137.865272] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1137.875547] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1137.889114] device veth1_macvtap entered promiscuous mode [ 1137.896006] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1137.902666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1137.909984] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1137.918925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1137.928048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1137.938773] device veth0_macvtap entered promiscuous mode [ 1137.945682] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1137.958306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1137.967972] device veth1_macvtap entered promiscuous mode [ 1137.974397] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1137.984499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1137.996434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1138.004720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1138.014731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.024618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1138.034848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.044025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1138.053792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.064221] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1138.071988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.083013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1138.091071] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1138.098308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1138.106279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1138.117852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1138.127915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.137470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1138.148048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.158397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1138.168245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.178790] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1138.185903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.195989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1138.203637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1138.211761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1138.230460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1138.241433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.252361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1138.262219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.271654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1138.281470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.290674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1138.300437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.311470] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1138.319011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.328073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1138.336623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1138.347660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1138.358476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.368010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1138.378984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.388421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1138.398239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.407583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1138.417848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.428192] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1138.436498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.445185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1138.453802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1139.939942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26921 comm=syz-executor.1 06:16:36 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:36 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mlockall(0x1) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sysfs$2(0x2, 0x1f, &(0x7f00000002c0)=""/165) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x8400}, 0x0) getresgid(0x0, &(0x7f0000001e00), &(0x7f0000001e40)) 06:16:37 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:37 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:37 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) 06:16:37 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:37 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:37 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) [ 1141.270118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26954 comm=syz-executor.1 06:16:37 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000003700)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "0b7d3dc2df4ef0f74e9a1e246423d5f95aea0c068f83fa999e8d85bddda92494", "6fd1ecad5512e00189b09129568275bbae7e331c78eb1d5d8b362176a47f2572"}}}]}, 0x268}}, 0x0) 06:16:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='decompose,nls=', @ANYRESHEX]) 06:16:38 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:38 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:38 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) 06:16:38 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1141.961291] hfsplus: unable to load nls mapping "0xffffffffffffffff" [ 1141.982163] hfsplus: unable to parse mount options [ 1142.166020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26999 comm=syz-executor.1 06:16:38 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1142.353269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.373322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.386102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.416930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.443360] device bridge_slave_1 left promiscuous mode [ 1142.449180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.491402] device bridge_slave_0 left promiscuous mode [ 1142.500560] bridge0: port 1(bridge_slave_0) entered disabled state 06:16:39 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1142.699502] device veth1_macvtap left promiscuous mode 06:16:39 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:39 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1142.740830] device veth0_macvtap left promiscuous mode [ 1142.766916] device veth1_vlan left promiscuous mode [ 1142.795343] device veth0_vlan left promiscuous mode [ 1143.283252] device hsr_slave_1 left promiscuous mode [ 1143.324893] device hsr_slave_0 left promiscuous mode [ 1143.392687] team0 (unregistering): Port device team_slave_1 removed [ 1143.417500] team0 (unregistering): Port device team_slave_0 removed [ 1143.442832] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1143.485459] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1143.558303] bond0 (unregistering): Released all slaves [ 1145.221826] IPVS: ftp: loaded support on port[0] = 21 [ 1146.052240] chnl_net:caif_netlink_parms(): no params data found [ 1146.108774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.115360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.122991] device bridge_slave_0 entered promiscuous mode [ 1146.130579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.136992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.144293] device bridge_slave_1 entered promiscuous mode [ 1146.164619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1146.173990] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1146.193846] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1146.201151] team0: Port device team_slave_0 added [ 1146.206778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1146.214246] team0: Port device team_slave_1 added [ 1146.231784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.238065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.263500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.275017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.281332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.306837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.317406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1146.325084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1146.384715] device hsr_slave_0 entered promiscuous mode [ 1146.440576] device hsr_slave_1 entered promiscuous mode [ 1146.490928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1146.498317] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1146.574620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.581294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.587961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.594498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.633988] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1146.640799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.649679] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1146.660277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1146.667451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.674542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.685694] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1146.692137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.702035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1146.709854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.716283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.726766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1146.734836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.741361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.761339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1146.769308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1146.782130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1146.797023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1146.807254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1146.817868] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1146.824687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1146.832757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1146.840693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1146.854059] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1146.862851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1146.869625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1146.883078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.952322] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1146.964482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1147.001990] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1147.009444] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1147.017099] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1147.028545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1147.037268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1147.044549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1147.053540] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1147.062872] device veth0_vlan entered promiscuous mode [ 1147.073791] device veth1_vlan entered promiscuous mode [ 1147.090658] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1147.101791] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1147.108763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1147.117683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1147.127956] device veth0_macvtap entered promiscuous mode [ 1147.134369] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1147.144553] device veth1_macvtap entered promiscuous mode [ 1147.151106] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1147.160930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1147.170857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1147.179966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.190824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.200156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.209870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.219043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.229102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.238392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1147.248165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.258375] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1147.265579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.274562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1147.282782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1147.290335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1147.298404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1147.308397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.318928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.328673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.338657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.348243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.359536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.368765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1147.378654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.388898] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1147.395927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.403927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1147.412516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:16:45 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:45 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) 06:16:45 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:45 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:45 executing program 0: pipe(0x0) getpid() getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000400)={0x39}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r3, &(0x7f0000000080)="030400306c00600040030000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000001c0)=""/255, &(0x7f0000000080)=0xff) socket$inet(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 06:16:45 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) [ 1149.524882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27106 comm=syz-executor.1 06:16:46 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:46 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:46 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:46 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:46 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:46 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:46 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) 06:16:46 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1150.661595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27145 comm=syz-executor.1 06:16:47 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:47 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1150.933893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.968177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.016035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.036774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.060907] device bridge_slave_1 left promiscuous mode [ 1151.074911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.301541] device bridge_slave_0 left promiscuous mode [ 1151.308678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.383136] device veth1_macvtap left promiscuous mode [ 1151.391969] device veth0_macvtap left promiscuous mode [ 1151.404089] device veth1_vlan left promiscuous mode [ 1151.414950] device veth0_vlan left promiscuous mode [ 1151.756655] device hsr_slave_1 left promiscuous mode [ 1151.804267] device hsr_slave_0 left promiscuous mode [ 1151.859436] team0 (unregistering): Port device team_slave_1 removed [ 1151.869890] team0 (unregistering): Port device team_slave_0 removed [ 1151.883424] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1151.923810] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1152.005168] bond0 (unregistering): Released all slaves 06:16:48 executing program 0: pipe(0x0) getpid() getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000400)={0x39}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r3, &(0x7f0000000080)="030400306c00600040030000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000001c0)=""/255, &(0x7f0000000080)=0xff) socket$inet(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 06:16:48 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:48 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x0, 0x300) 06:16:48 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1152.327050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27182 comm=syz-executor.1 [ 1154.171880] IPVS: ftp: loaded support on port[0] = 21 [ 1155.025289] chnl_net:caif_netlink_parms(): no params data found [ 1155.091258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.097962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.105688] device bridge_slave_0 entered promiscuous mode [ 1155.114426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.121073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.128373] device bridge_slave_1 entered promiscuous mode [ 1155.154118] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1155.163447] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1155.186306] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1155.195615] team0: Port device team_slave_0 added [ 1155.202054] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1155.209517] team0: Port device team_slave_1 added [ 1155.228203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.234614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.260110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.274887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.281340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.306658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.317179] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1155.328130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1155.393042] device hsr_slave_0 entered promiscuous mode [ 1155.430441] device hsr_slave_1 entered promiscuous mode [ 1155.471120] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1155.482103] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1155.560857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.567482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.574190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.580875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.623282] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1155.629398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.638548] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1155.652985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1155.661804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.678989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.689310] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1155.696084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.709551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1155.717708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.724149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.740469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1155.748355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.754794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.772156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1155.779949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1155.788242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1155.796896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1155.807313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.814381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.822776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.829571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.837361] device bridge_slave_1 left promiscuous mode [ 1155.843074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.880815] device bridge_slave_0 left promiscuous mode [ 1155.886347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.942267] device veth1_macvtap left promiscuous mode [ 1155.947927] device veth0_macvtap left promiscuous mode [ 1155.953533] device veth1_vlan left promiscuous mode [ 1155.958581] device veth0_vlan left promiscuous mode [ 1156.075383] device hsr_slave_1 left promiscuous mode [ 1156.124326] device hsr_slave_0 left promiscuous mode [ 1156.169284] team0 (unregistering): Port device team_slave_1 removed [ 1156.181647] team0 (unregistering): Port device team_slave_0 removed [ 1156.191855] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1156.236177] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1156.312852] bond0 (unregistering): Released all slaves [ 1156.369608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.380162] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1156.386388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1156.394752] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1156.404201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1156.419025] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1156.428638] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1156.434996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1156.442368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1156.459136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.583099] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1156.598733] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1156.605934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1156.619403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1156.675086] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1156.682822] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1156.689909] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1156.701180] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1156.707822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1156.716493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1156.731498] device veth0_vlan entered promiscuous mode [ 1156.744141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1156.752357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1156.762605] device veth1_vlan entered promiscuous mode [ 1156.768777] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1156.784465] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1156.803914] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1156.819539] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1156.826678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1156.838643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1156.846528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1156.858158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1156.869419] device veth0_macvtap entered promiscuous mode [ 1156.881613] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1156.895713] device veth1_macvtap entered promiscuous mode [ 1156.903280] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1156.918444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1156.934456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1156.944814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1156.960434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.969575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1156.982509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1156.992625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1157.005296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.017482] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1157.028082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.038657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1157.049429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1157.057618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1157.068543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1157.079914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1157.094350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.103871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1157.118761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.127993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1157.141452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.155168] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1157.163805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.173181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1157.183268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:16:55 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(0x0, 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:55 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{}, {}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:55 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:55 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x20000003) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x15291, 0x0, 0x0, 0x0, 0x690f, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xd0, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="75c2821c0f913e0e8c02ad2ef4ff5a58"}, @IPVS_DEST_ATTR_TUN_PORT={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) preadv(r1, &(0x7f0000000480), 0x1000000000000177, 0x6c00000000000000) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) 06:16:55 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x0, 0x300) 06:16:55 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:55 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(0x0, 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:55 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:56 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(0x0, 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:56 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x20000003) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x15291, 0x0, 0x0, 0x0, 0x690f, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xd0, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="75c2821c0f913e0e8c02ad2ef4ff5a58"}, @IPVS_DEST_ATTR_TUN_PORT={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) preadv(r1, &(0x7f0000000480), 0x1000000000000177, 0x6c00000000000000) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) 06:16:56 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:16:56 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:16:56 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:16:56 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r10, &(0x7f0000000080)={0x10}, 0x10) 06:16:56 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 06:16:56 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1160.686826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.737978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.817669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.834074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.855249] device bridge_slave_1 left promiscuous mode [ 1160.876721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.941018] device bridge_slave_0 left promiscuous mode [ 1160.947190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.994504] device veth1_macvtap left promiscuous mode [ 1161.023097] device veth0_macvtap left promiscuous mode [ 1161.037287] device veth1_vlan left promiscuous mode [ 1161.048241] device veth0_vlan left promiscuous mode [ 1161.372725] device hsr_slave_1 left promiscuous mode [ 1161.414856] device hsr_slave_0 left promiscuous mode [ 1161.491783] team0 (unregistering): Port device team_slave_1 removed [ 1161.526558] team0 (unregistering): Port device team_slave_0 removed [ 1161.548168] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1161.614228] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1161.769176] bond0 (unregistering): Released all slaves [ 1163.481180] IPVS: ftp: loaded support on port[0] = 21 [ 1164.258673] IPVS: ftp: loaded support on port[0] = 21 [ 1164.331614] chnl_net:caif_netlink_parms(): no params data found [ 1164.434318] chnl_net:caif_netlink_parms(): no params data found [ 1164.474853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.482243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.489503] device bridge_slave_0 entered promiscuous mode [ 1164.503861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.510844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.518033] device bridge_slave_1 entered promiscuous mode [ 1164.542344] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1164.553248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1164.578085] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1164.586132] team0: Port device team_slave_0 added [ 1164.592799] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1164.599999] team0: Port device team_slave_1 added [ 1164.622629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.628924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.654428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.673291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.679570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.705122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.724205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1164.731662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.738148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.745827] device bridge_slave_0 entered promiscuous mode [ 1164.752926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1164.760193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.766598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.773824] device bridge_slave_1 entered promiscuous mode [ 1164.844546] device hsr_slave_0 entered promiscuous mode [ 1164.890528] device hsr_slave_1 entered promiscuous mode [ 1164.937023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1164.945325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1164.953865] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1164.964253] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1165.002553] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1165.009997] team0: Port device team_slave_0 added [ 1165.019235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1165.028893] team0: Port device team_slave_1 added [ 1165.058473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.067181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.093720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.109216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.116173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.141787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.152623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1165.164152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1165.234825] device hsr_slave_0 entered promiscuous mode [ 1165.280469] device hsr_slave_1 entered promiscuous mode [ 1165.324212] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1165.337402] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1165.398580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1165.416839] audit: type=1400 audit(1583907421.685:205): avc: denied { map } for pid=27348 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1165.501877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1165.524737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.534986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1165.546551] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1165.554916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1165.562113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1165.572647] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1165.578760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.590466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1165.598470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1165.606831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1165.615135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.621578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.629151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1165.642146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1165.653547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1165.662727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1165.671307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1165.679079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.685643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.693443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1165.704932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1165.714915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1165.732916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.741447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1165.754341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1165.761627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1165.773489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1165.781335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1165.789106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1165.797563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1165.806945] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1165.818259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1165.826493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1165.835088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1165.844854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1165.855470] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1165.862474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.869861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1165.877124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1165.885395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1165.895522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1165.903515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1165.911578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1165.919083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1165.927718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1165.935572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.942197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.951080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1165.958949] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1165.965528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1165.976140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1165.987538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1165.996301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1166.005856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.012327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.023134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1166.030773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1166.042689] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1166.050876] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1166.058068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1166.065637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1166.073902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1166.085482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1166.096272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.106795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1166.118248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1166.126916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1166.135082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1166.145796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1166.153756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1166.162254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1166.176352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1166.183585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1166.192800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1166.204587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1166.211924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1166.219605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1166.231956] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1166.238093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1166.256636] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1166.265269] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1166.275888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1166.282952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1166.294906] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1166.304754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.321147] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1166.328255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1166.341667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1166.401802] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1166.409823] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1166.417866] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1166.429361] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1166.437447] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1166.448907] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1166.457021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1166.465821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1166.473768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1166.482172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1166.493345] device veth0_vlan entered promiscuous mode [ 1166.502025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.509215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1166.526078] device veth1_vlan entered promiscuous mode [ 1166.532878] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1166.544690] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1166.555208] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1166.564005] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1166.571161] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1166.585753] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1166.592620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1166.601084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1166.608286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1166.616993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1166.626757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.634736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1166.644231] device veth0_vlan entered promiscuous mode [ 1166.652596] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1166.665690] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1166.674007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.681994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.693916] device veth1_vlan entered promiscuous mode [ 1166.699974] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1166.708808] device veth0_macvtap entered promiscuous mode [ 1166.716621] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1166.727225] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1166.738699] device veth1_macvtap entered promiscuous mode [ 1166.745525] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1166.756379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1166.768459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1166.777296] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1166.787209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1166.797813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.807616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1166.817462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.828461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1166.838385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.850481] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1166.857735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.867530] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1166.877892] device veth0_macvtap entered promiscuous mode [ 1166.884290] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1166.891126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1166.898495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1166.906727] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1166.914515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1166.922538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1166.930578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1166.938702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.947087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.956063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1166.966536] device veth1_macvtap entered promiscuous mode [ 1166.973705] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1166.983830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1166.993868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.003383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1167.013958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.023463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1167.033945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.044581] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1167.051708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.061129] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1167.068493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1167.077014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1167.089523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1167.107552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1167.119171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1167.129500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.139302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1167.149147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.158489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1167.168626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.178136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1167.188283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.198619] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1167.205894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.216888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1167.225463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1167.235792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1167.249851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.260174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1167.269956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.279958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1167.289931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.299165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1167.308934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.319316] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1167.326674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.335549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1167.344158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1168.561548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27432 comm=syz-executor.1 06:17:05 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b0000000000"], 0x28}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3a) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x0, 0x300) 06:17:05 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:17:05 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 06:17:05 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) 06:17:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 06:17:05 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90692, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 06:17:05 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:17:05 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:17:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5cbaecce2c75b182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) 06:17:05 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:17:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1b}, 0x80, 0x0, 0x0, &(0x7f0000000180)}, 0x0) 06:17:06 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:17:06 executing program 2: gettid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x8, 0x0, 0x0, 0x1}}, 0x20) keyctl$chown(0x4, 0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000005fba000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000069ff1b00"], 0x3}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x680, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') socket$packet(0x11, 0x3, 0x300) 06:17:06 executing program 0: syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000280)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 06:17:06 executing program 3: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000180)={r8, 0x18}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r9, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r9, 0x3, 0x0, 0x8020003) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) lseek(r9, 0x0, 0x3) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) [ 1170.123829] MINIX-fs: bad superblock or unable to read bitmaps 06:17:06 executing program 5: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000180)={r3, 0x18}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r4, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r4, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r6, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000180)={r6, 0x18}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r7, 0x3, 0x0, 0x8020003) lseek(r7, 0x0, 0x3) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) 06:17:06 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1170.255115] MINIX-fs: bad superblock or unable to read bitmaps 06:17:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) [ 1170.297875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.308386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.361365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.460349] batman_adv: batadv0: Removing interface: batadv_slave_1 06:17:06 executing program 4: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7, 0x18}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1170.561266] device bridge_slave_1 left promiscuous mode [ 1170.579372] bridge0: port 2(bridge_slave_1) entered disabled state 06:17:06 executing program 0: add_key$keyring(0x0, &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000180)={0x0, 0x18}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r7}) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r8, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r8, 0x3, 0x0, 0x8020003) lseek(r8, 0x0, 0x3) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r10) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) getpid() write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1170.621714] device bridge_slave_0 left promiscuous mode [ 1170.629936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.731801] device veth1_macvtap left promiscuous mode [ 1170.755613] device veth0_macvtap left promiscuous mode [ 1170.886184] device veth1_vlan left promiscuous mode [ 1170.922520] device veth0_vlan left promiscuous mode [ 1171.333789] device hsr_slave_1 left promiscuous mode [ 1171.375069] device hsr_slave_0 left promiscuous mode [ 1171.444075] team0 (unregistering): Port device team_slave_1 removed [ 1171.466583] team0 (unregistering): Port device team_slave_0 removed [ 1171.493255] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1171.568930] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1171.702761] bond0 (unregistering): Released all slaves [ 1173.632454] IPVS: ftp: loaded support on port[0] = 21 [ 1174.439398] IPVS: ftp: loaded support on port[0] = 21 [ 1174.517755] chnl_net:caif_netlink_parms(): no params data found [ 1174.634758] chnl_net:caif_netlink_parms(): no params data found [ 1174.685768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.693373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.703547] device bridge_slave_0 entered promiscuous mode [ 1174.711581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.717974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.726054] device bridge_slave_1 entered promiscuous mode [ 1174.765737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1174.788947] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1174.805728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.813554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.821101] device bridge_slave_0 entered promiscuous mode [ 1174.836464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.842981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.851058] device bridge_slave_1 entered promiscuous mode [ 1174.863500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1174.871701] team0: Port device team_slave_0 added [ 1174.887601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1174.897529] team0: Port device team_slave_1 added [ 1174.904265] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1174.920741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1174.943619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.950358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.976355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.999131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.006285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.032262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.042717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1175.050000] team0: Port device team_slave_0 added [ 1175.055597] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1175.064967] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1175.072619] team0: Port device team_slave_1 added [ 1175.086430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1175.111230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.117689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.143267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.154847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.161211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.186497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.209526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1175.253612] device hsr_slave_0 entered promiscuous mode [ 1175.290560] device hsr_slave_1 entered promiscuous mode [ 1175.351102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1175.358378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1175.371554] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1175.415212] device hsr_slave_0 entered promiscuous mode [ 1175.470417] device hsr_slave_1 entered promiscuous mode [ 1175.527334] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1175.547060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1175.674590] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1175.698914] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1175.722596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.729620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.737723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.744856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.752380] kasan: CONFIG_KASAN_INLINE enabled [ 1175.757261] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1175.765062] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1175.771305] Modules linked in: [ 1175.774485] CPU: 0 PID: 3269 Comm: kworker/u4:5 Not tainted 4.14.172-syzkaller #0 [ 1175.782326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.792367] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1175.799643] task: ffff88809baf4580 task.stack: ffff88809bb50000 [ 1175.805705] RIP: 0010:batadv_iv_ogm_queue_add+0x48/0xe00 [ 1175.811143] RSP: 0018:ffff88809bb57b88 EFLAGS: 00010246 [ 1175.816484] RAX: dffffc0000000000 RBX: ffff88808f721040 RCX: ffff88808f721040 [ 1175.823783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1175.831056] RBP: 0000000000000006 R08: ffff88808f721040 R09: 0000000000000001 [ 1175.839361] R10: ffff88809baf4e50 R11: ffff88809baf4580 R12: ffff8880984c4e80 [ 1175.846623] R13: ffff88808f721068 R14: 0000000000000000 R15: 000000010001567b [ 1175.853972] FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 1175.862193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.868067] CR2: 00007ffd62f3efe8 CR3: 000000009e48d000 CR4: 00000000001406f0 [ 1175.875331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1175.882683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1175.890090] Call Trace: [ 1175.892775] ? lock_acquire+0x170/0x3f0 [ 1175.896859] ? batadv_iv_ogm_schedule+0x869/0xdf0 [ 1175.901983] ? check_preemption_disabled+0x35/0x240 [ 1175.907008] batadv_iv_ogm_schedule+0xa38/0xdf0 [ 1175.911757] batadv_iv_send_outstanding_bat_ogm_packet+0x4ad/0x6a0 [ 1175.918544] process_one_work+0x813/0x1540 [ 1175.922904] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1175.927557] ? worker_thread+0x15d/0x1070 [ 1175.931863] ? _raw_spin_unlock_irq+0x24/0x80 [ 1175.936899] worker_thread+0x5d1/0x1070 [ 1175.941209] ? process_one_work+0x1540/0x1540 [ 1175.945697] kthread+0x30d/0x420 [ 1175.949061] ? kthread_create_on_node+0xd0/0xd0 [ 1175.953726] ret_from_fork+0x24/0x30 [ 1175.957507] Code: 00 00 48 89 4c 24 08 4c 89 44 24 10 44 89 4c 24 20 e8 9d da 35 fb 49 8d 7e 03 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 c5 0b 00 [ 1175.976705] RIP: batadv_iv_ogm_queue_add+0x48/0xe00 RSP: ffff88809bb57b88 [ 1175.984028] ---[ end trace 752f5f519f26f066 ]--- [ 1175.988804] Kernel panic - not syncing: Fatal exception [ 1175.995653] Kernel Offset: disabled [ 1175.999293] Rebooting in 86400 seconds..