4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={r4, 0x0, 0x100, 0x6, 0xda}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={r6, 0x0, 0x100, 0x6, 0xda}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x300, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffc34) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x7, 0x1, 0x7) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) fcntl$getown(r1, 0x9) getpgrp(r8) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), &(0x7f0000000280)=0x2) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r10 = getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x2, 0x9, 0x200, 0x1, 0x9}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r12 = dup(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004800)=0xffffffffffffffc3) r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x67, r14, r15}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r12, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r15, r10, 0x9309, 0x6, 0x9, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) [ 252.185893][T10061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10061 comm=syz-executor.4 18:02:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) keyctl$setperm(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 252.236989][T10058] debugfs: File 'dropped' in directory 'loop0' already present! [ 252.316077][T10068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10068 comm=syz-executor.3 [ 252.324290][T10058] debugfs: File 'msg' in directory 'loop0' already present! 18:02:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000008000000b) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000000000000000018040000000000000000"]) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffecb, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) set_robust_list(&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x3}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 252.359545][T10058] debugfs: File 'trace0' in directory 'loop0' already present! [ 252.391340][T10072] 9pnet: bogus RWRITE count (2 > 1) [ 252.402804][T10076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10076 comm=syz-executor.0 [ 252.449639][T10064] debugfs: File 'dropped' in directory 'loop0' already present! 18:02:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) keyctl$setperm(0x5, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 252.486839][T10064] debugfs: File 'msg' in directory 'loop0' already present! [ 252.497068][T10064] debugfs: File 'trace0' in directory 'loop0' already present! 18:02:29 executing program 4: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(r1, 0x0, &(0x7f00000000c0)="15bf6234488dd25d726070") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xc9e, @mcast1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r3 = dup(r0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={r4, 0x0, 0x100, 0x6, 0xda}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={r6, 0x0, 0x100, 0x6, 0xda}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x300, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffc34) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x7, 0x1, 0x7) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) fcntl$getown(r1, 0x9) getpgrp(r8) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), &(0x7f0000000280)=0x2) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r10 = getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x2, 0x9, 0x200, 0x1, 0x9}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r12 = dup(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004800)=0xffffffffffffffc3) r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x67, r14, r15}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r12, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r15, r10, 0x9309, 0x6, 0x9, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) 18:02:29 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(r1, 0x0, &(0x7f00000000c0)="15bf6234488dd25d726070") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xc9e, @mcast1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r3 = dup(r0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={r4, 0x0, 0x100, 0x6, 0xda}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={r6, 0x0, 0x100, 0x6, 0xda}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x300, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffc34) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x7, 0x1, 0x7) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) fcntl$getown(r1, 0x9) getpgrp(r8) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), &(0x7f0000000280)=0x2) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r10 = getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x2, 0x9, 0x200, 0x1, 0x9}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r12 = dup(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004800)=0xffffffffffffffc3) r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x67, r14, r15}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r12, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r15, r10, 0x9309, 0x6, 0x9, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) 18:02:29 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(r1, 0x0, &(0x7f00000000c0)="15bf6234488dd25d726070") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xc9e, @mcast1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r3 = dup(r0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={r4, 0x0, 0x100, 0x6, 0xda}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={r6, 0x0, 0x100, 0x6, 0xda}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x300, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffc34) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x7, 0x1, 0x7) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) fcntl$getown(r1, 0x9) getpgrp(r8) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), &(0x7f0000000280)=0x2) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r10 = getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x2, 0x9, 0x200, 0x1, 0x9}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r12 = dup(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004800)=0xffffffffffffffc3) r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x67, r14, r15}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r12, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r15, r10, 0x9309, 0x6, 0x9, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) [ 252.724939][T10090] debugfs: File 'dropped' in directory 'loop0' already present! 18:02:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 252.778725][T10090] debugfs: File 'msg' in directory 'loop0' already present! [ 252.805250][T10095] 9pnet: bogus RWRITE count (2 > 1) [ 252.822434][T10090] debugfs: File 'trace0' in directory 'loop0' already present! 18:02:30 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000008000000b) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{}]}, 0x10) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000000000000000018040000000000000000"]) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffecb, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) set_robust_list(&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x3}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 252.850878][T10096] debugfs: File 'dropped' in directory 'loop0' already present! [ 252.877563][T10096] debugfs: File 'msg' in directory 'loop0' already present! [ 252.885710][T10096] debugfs: File 'trace0' in directory 'loop0' already present! 18:02:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 252.914950][T10090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10090 comm=syz-executor.4 [ 252.942987][T10110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10110 comm=syz-executor.3 18:02:30 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) [ 252.967902][T10105] debugfs: File 'dropped' in directory 'loop0' already present! [ 253.008084][T10105] debugfs: File 'msg' in directory 'loop0' already present! [ 253.073596][T10105] debugfs: File 'trace0' in directory 'loop0' already present! [ 253.078238][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10118 comm=syz-executor.0 18:02:30 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 18:02:30 executing program 4: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(r1, 0x0, &(0x7f00000000c0)="15bf6234488dd25d726070") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xc9e, @mcast1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r3 = dup(r0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={r4, 0x0, 0x100, 0x6, 0xda}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={r6, 0x0, 0x100, 0x6, 0xda}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x300, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffc34) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x7, 0x1, 0x7) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) fcntl$getown(r1, 0x9) getpgrp(r8) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), &(0x7f0000000280)=0x2) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r10 = getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x2, 0x9, 0x200, 0x1, 0x9}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r12 = dup(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004800)=0xffffffffffffffc3) r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x67, r14, r15}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r12, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r15, r10, 0x9309, 0x6, 0x9, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) 18:02:30 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(r1, 0x0, &(0x7f00000000c0)="15bf6234488dd25d726070") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xc9e, @mcast1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r3 = dup(r0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={r4, 0x0, 0x100, 0x6, 0xda}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={r6, 0x0, 0x100, 0x6, 0xda}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x300, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffc34) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x7, 0x1, 0x7) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) fcntl$getown(r1, 0x9) getpgrp(r8) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), &(0x7f0000000280)=0x2) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r10 = getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x2, 0x9, 0x200, 0x1, 0x9}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r12 = dup(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004800)=0xffffffffffffffc3) r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x67, r14, r15}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r12, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r15, r10, 0x9309, 0x6, 0x9, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) [ 253.201625][T10124] 9pnet: bogus RWRITE count (2 > 1) 18:02:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:30 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 18:02:30 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(r1, 0x0, &(0x7f00000000c0)="15bf6234488dd25d726070") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xc9e, @mcast1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r3 = dup(r0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000001c0)={r4, 0x0, 0x100, 0x6, 0xda}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000080)=0x3f, 0x4) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000001c0)={r6, 0x0, 0x100, 0x6, 0xda}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x300, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffc34) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x7, 0x1, 0x7) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) fcntl$getown(r1, 0x9) getpgrp(r8) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), &(0x7f0000000280)=0x2) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r10 = getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x2, 0x9, 0x200, 0x1, 0x9}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r12 = dup(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000005ec0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004800)=0xffffffffffffffc3) r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0x67, r14, r15}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x9, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r12, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x0, r15, r10, 0x9309, 0x6, 0x9, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x1, 0xc474, 0xfffffffffffffffc, 0x2, 0x8, 0x7}}, 0xa0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) [ 253.363684][T10132] debugfs: File 'dropped' in directory 'loop0' already present! [ 253.400884][T10132] debugfs: File 'msg' in directory 'loop0' already present! 18:02:30 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 253.420042][T10132] debugfs: File 'trace0' in directory 'loop0' already present! 18:02:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000180)) request_key(0x0, 0x0, 0x0, r2) [ 253.469337][T10133] debugfs: File 'dropped' in directory 'loop0' already present! [ 253.469876][T10142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10142 comm=syz-executor.4 [ 253.507689][T10133] debugfs: File 'msg' in directory 'loop0' already present! [ 253.531209][T10133] debugfs: File 'trace0' in directory 'loop0' already present! [ 253.548231][T10148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10148 comm=syz-executor.3 18:02:30 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 253.610359][T10154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pig=10154 comm=syz-executor.0 18:02:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 253.660619][T10140] debugfs: File 'dropped' in directory 'loop0' already present! [ 253.721780][T10140] debugfs: File 'msg' in directory 'loop0' already present! [ 253.778962][T10140] debugfs: File 'trace0' in directory 'loop0' already present! 18:02:31 executing program 5: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:02:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07a00200000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0xfecc, 0x1c0}]) 18:02:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 253.966310][T10163] 9pnet: bogus RWRITE count (2 > 1) 18:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000180)) request_key(0x0, 0x0, 0x0, r2) 18:02:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 18:02:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 254.390333][T10193] 9pnet: bogus RWRITE count (2 > 1) [ 254.423970][T10172] loop4: p1 p2[EZD] p3 p4 18:02:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 254.477821][ T26] audit: type=1400 audit(1570903351.654:99): avc: denied { bind } for pid=10196 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 254.509737][T10172] loop4: p1 size 44042239 extends beyond EOD, truncated 18:02:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 254.552155][T10172] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 254.587198][T10172] loop4: p3 size 1912633224 extends beyond EOD, truncated 18:02:31 executing program 0: fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:gpg_agent_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xffffffffffffffff}, 0x59) memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 254.741939][T10172] loop4: p4 size 32768 extends beyond EOD, truncated [ 254.755721][T10209] SELinux: Invalid class 65535 [ 254.797626][T10211] SELinux: Invalid class 65535 [ 254.808864][T10207] 9pnet: bogus RWRITE count (2 > 1) 18:02:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07a00200000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0xfecc, 0x1c0}]) 18:02:32 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000180)) request_key(0x0, 0x0, 0x0, r2) 18:02:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=[@rights={{0xc}}], 0xc}, 0x0) 18:02:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:32 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 255.069570][T10222] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 255.081103][ T9022] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 255.108595][T10221] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 255.152119][T10220] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 255.165831][ T2495] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.177526][ T2495] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.185966][ T2495] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.189539][T10223] blk_update_request: I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 255.197142][ T2495] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.216460][ T2495] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.227458][ T2495] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.235916][ T2495] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.246794][ T2495] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.255068][ T2495] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.265962][ T2495] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 255.274980][ T2495] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.287153][ T2495] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 255.295440][ T2495] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 255.303496][ T2495] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 255.311858][ T2496] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 255.319960][ T2496] Buffer I/O error on dev loop4p4, logical block 3, async page read 18:02:32 executing program 0: open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) [ 255.515627][T10238] overlayfs: 'file0' not a directory 18:02:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:02:32 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000180)) request_key(0x0, 0x0, 0x0, r2) 18:02:32 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = memfd_create(&(0x7f0000000200)='wlan0)^\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) [ 255.674457][T10234] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) 18:02:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) [ 256.030797][T10254] 9pnet: bogus RWRITE count (2 > 1) 18:02:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 18:02:33 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000004c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r5, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f0000000380)={r6, r7+30000000}) getgroups(0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r3, 0xae80, 0x900000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1440c4fa08086eb48cf978ef714d3a0000100001bfa963ecf4ff0000000300930000"], 0x14}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xf) open(&(0x7f0000000000)='./bus\x00', 0xbc82a56d30dc0e7b, 0x1bb) faccessat(0xffffffffffffff9c, &(0x7f00000014c0)='./bus\x00', 0x0, 0x0) 18:02:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:02:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000180)) 18:02:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x0, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:33 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000004c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r5, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f0000000380)={r6, r7+30000000}) getgroups(0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r3, 0xae80, 0x900000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1440c4fa08086eb48cf978ef714d3a0000100001bfa963ecf4ff0000000300930000"], 0x14}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xf) open(&(0x7f0000000000)='./bus\x00', 0xbc82a56d30dc0e7b, 0x1bb) faccessat(0xffffffffffffff9c, &(0x7f00000014c0)='./bus\x00', 0x0, 0x0) 18:02:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x0, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:34 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x0, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:34 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000004c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r5, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f0000000380)={r6, r7+30000000}) getgroups(0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r3, 0xae80, 0x900000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1440c4fa08086eb48cf978ef714d3a0000100001bfa963ecf4ff0000000300930000"], 0x14}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xf) open(&(0x7f0000000000)='./bus\x00', 0xbc82a56d30dc0e7b, 0x1bb) faccessat(0xffffffffffffff9c, &(0x7f00000014c0)='./bus\x00', 0x0, 0x0) 18:02:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 18:02:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 258.738909][ T9352] device bridge_slave_1 left promiscuous mode [ 258.745626][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.811138][ T9352] device bridge_slave_0 left promiscuous mode [ 258.817282][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.528044][ T9352] device hsr_slave_0 left promiscuous mode [ 260.597511][ T9352] device hsr_slave_1 left promiscuous mode [ 260.658373][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 260.670515][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 260.681532][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.753503][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.853995][ T9352] bond0 (unregistering): Released all slaves [ 260.966240][T10317] IPVS: ftp: loaded support on port[0] = 21 [ 261.034300][T10317] chnl_net:caif_netlink_parms(): no params data found [ 261.074158][T10317] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.081571][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.090467][T10317] device bridge_slave_0 entered promiscuous mode [ 261.147619][T10317] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.154742][T10317] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.169208][T10317] device bridge_slave_1 entered promiscuous mode [ 261.196868][T10317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.216401][T10317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.245826][T10317] team0: Port device team_slave_0 added [ 261.260150][T10317] team0: Port device team_slave_1 added [ 261.334550][T10317] device hsr_slave_0 entered promiscuous mode [ 261.377639][T10317] device hsr_slave_1 entered promiscuous mode [ 261.437529][T10317] debugfs: Directory 'hsr0' with parent '/' already present! [ 261.465531][T10317] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.472626][T10317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.479994][T10317] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.487036][T10317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.553342][T10317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.573899][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.589767][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.603632][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.618565][T10317] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.631442][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.640191][ T2855] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.647232][ T2855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.670152][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.679448][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.686479][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.701664][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.726557][T10317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.743284][T10317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.756712][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.771069][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.784043][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.796239][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.825739][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.843452][T10317] 8021q: adding VLAN 0 to HW filter on device batadv0 18:02:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 18:02:39 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x0, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:02:39 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000004c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedreceive(r5, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f0000000380)={r6, r7+30000000}) getgroups(0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r3, 0xae80, 0x900000000000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1440c4fa08086eb48cf978ef714d3a0000100001bfa963ecf4ff0000000300930000"], 0x14}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xf) open(&(0x7f0000000000)='./bus\x00', 0xbc82a56d30dc0e7b, 0x1bb) faccessat(0xffffffffffffff9c, &(0x7f00000014c0)='./bus\x00', 0x0, 0x0) 18:02:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 18:02:39 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x0, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:39 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) dup3(r0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r2 = memfd_create(&(0x7f0000000040)='Mq\x00'/12, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020006000000030000c4b40003003ef9ff38a594249c1fe53d00000000000000000000fe"], 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r3) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x12f}]) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = open(0x0, 0x141042, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r5, &(0x7f00000000c0)="061669617e83d61442e71b97d069dae088b97ebe827cc5edba4165744c", 0x1d, 0x0, 0x0, 0x3, r6}, &(0x7f0000000340)) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) vmsplice(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000580)}, {&(0x7f0000000640)="de090b559c0d99d418da79fc0fd5ca528e432b6622500f90cf0e0812fc5d0ecdbebeca643960d86410015ca27e307326e1662ca86ee704c06d5b1c1ef30b72ddb39621384bdc7a0d326db5486e4bd8a5216479d2aaa58a5ce24513b13ecf59334c70cbf888f5098d02be7029400056bd2186cb1a01eced2ab4dd0436363897dddb03745f4932ce90d8e5af0cc4f4", 0x8e}, {0x0}], 0x4, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x88bd5e605ad4a327) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x522, &(0x7f0000000b80)=[{}, {}, {}, {}, {}]}) unlink(&(0x7f0000000000)='./file0\x00') syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x10000, 0x0) 18:02:39 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x0, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) [ 262.814526][T10350] ERROR: Domain ' /sbin/init /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/9' not defined. 18:02:40 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2}, 0x80000001}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000004e80)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="24000000060107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x30a}, 0x0) 18:02:40 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:02:40 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 18:02:40 executing program 4: ustat(0x13, &(0x7f0000000000)) 18:02:40 executing program 0: setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000080)="2e0f38f126098866dfa8a1c00f07baf80c66b851f8608666efbafc0cb00dee6467660f3810cf6766c7442400440000006766c74424022ad16bc46766c744240600000000670f011c24f30fc7752266b80000c0fe0f23d0b89b008ee866353000000f0f23f8b83b008ed866b9800000c00f326635010000000f30", 0x7a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = memfd_create(&(0x7f0000000200)='wlan0)^\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 18:02:40 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x200000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x80800) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = socket(0x0, 0x200000000803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000240)) r2 = dup(0xffffffffffffffff) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000004c0)='tls\x00', 0x4) socket(0x10, 0x0, 0x0) utime(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) 18:02:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:02:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:41 executing program 4: 18:02:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:02:41 executing program 4: 18:02:41 executing program 0: 18:02:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 18:02:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x71, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup2(r1, r2) 18:02:41 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendfile(r0, r1, 0x0, 0xffff) 18:02:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) [ 264.569606][ T26] audit: type=1804 audit(1570903361.744:100): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir885425101/syzkaller.ugg5FU/33/bus" dev="sda1" ino=16641 res=1 [ 264.758935][ T26] audit: type=1804 audit(1570903361.794:101): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir885425101/syzkaller.ugg5FU/33/bus" dev="sda1" ino=16641 res=1 [ 264.886283][ T26] audit: type=1804 audit(1570903361.794:102): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir885425101/syzkaller.ugg5FU/33/bus" dev="sda1" ino=16641 res=1 [ 265.978030][ T9352] device bridge_slave_1 left promiscuous mode [ 265.984166][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.038021][ T9352] device bridge_slave_0 left promiscuous mode [ 266.044151][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.758552][ T9352] device hsr_slave_0 left promiscuous mode [ 267.797559][ T9352] device hsr_slave_1 left promiscuous mode [ 267.875459][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 267.888999][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 267.899849][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.971142][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.070351][ T9352] bond0 (unregistering): Released all slaves [ 268.186065][T10452] IPVS: ftp: loaded support on port[0] = 21 [ 268.251653][T10452] chnl_net:caif_netlink_parms(): no params data found [ 268.285447][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.292581][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.300475][T10452] device bridge_slave_0 entered promiscuous mode [ 268.308079][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.315110][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.323051][T10452] device bridge_slave_1 entered promiscuous mode [ 268.339119][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.350098][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.366382][T10452] team0: Port device team_slave_0 added [ 268.374505][T10452] team0: Port device team_slave_1 added [ 268.450025][T10452] device hsr_slave_0 entered promiscuous mode [ 268.518079][T10452] device hsr_slave_1 entered promiscuous mode [ 268.567584][T10452] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.642335][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.649420][T10452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.656731][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.663848][T10452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.716600][T10452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.731194][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.740461][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.748572][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.770737][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.786746][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.795754][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.802851][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.830212][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.839479][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.846517][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.855420][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.875162][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.883590][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.892355][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.901198][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.919758][T10452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.946922][T10452] 8021q: adding VLAN 0 to HW filter on device batadv0 18:02:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:02:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:02:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 18:02:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001dff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x0, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3130001d0e000000030000000000f01a000800ffffff00e90919000000000004e9ff0000000000000000002197df761a000000c59b2df4f3f2"], 0x39}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:02:46 executing program 4: 18:02:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:46 executing program 4: 18:02:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 18:02:46 executing program 0: 18:02:46 executing program 4: 18:02:46 executing program 0: 18:02:46 executing program 5: 18:02:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:02:47 executing program 4: 18:02:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:02:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:47 executing program 0: 18:02:47 executing program 5: 18:02:47 executing program 5: 18:02:47 executing program 0: 18:02:47 executing program 4: 18:02:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:02:47 executing program 0: 18:02:47 executing program 5: 18:02:47 executing program 4: 18:02:47 executing program 5: 18:02:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) 18:02:47 executing program 0: 18:02:47 executing program 4: 18:02:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 270.856174][T10522] 9pnet: Insufficient options for proto=fd 18:02:48 executing program 0: 18:02:48 executing program 5: 18:02:48 executing program 4: [ 272.645861][T10541] IPVS: ftp: loaded support on port[0] = 21 [ 272.844391][T10541] chnl_net:caif_netlink_parms(): no params data found [ 272.867879][T10541] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.874987][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.882681][T10541] device bridge_slave_0 entered promiscuous mode [ 272.891024][T10541] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.898192][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.905884][T10541] device bridge_slave_1 entered promiscuous mode [ 272.986643][T10541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.997948][T10541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.015303][T10541] team0: Port device team_slave_0 added [ 273.022744][T10541] team0: Port device team_slave_1 added [ 273.089013][T10541] device hsr_slave_0 entered promiscuous mode [ 273.147546][T10541] device hsr_slave_1 entered promiscuous mode [ 273.197433][T10541] debugfs: Directory 'hsr0' with parent '/' already present! [ 273.205218][ T9352] device bridge_slave_1 left promiscuous mode [ 273.211481][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.258405][ T9352] device bridge_slave_0 left promiscuous mode [ 273.264540][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.017970][ T9352] device hsr_slave_0 left promiscuous mode [ 275.087442][ T9352] device hsr_slave_1 left promiscuous mode [ 275.167927][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 275.179615][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 275.190712][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.241726][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.339564][ T9352] bond0 (unregistering): Released all slaves [ 275.467082][T10541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.484519][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.494788][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.505082][T10541] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.515695][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.524739][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.533165][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.540673][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.604142][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.623762][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.633435][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.649333][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.656374][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.670481][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.692399][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.701151][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.711653][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.722773][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.736163][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.761818][T10541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.772759][T10541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.785309][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.794062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.802673][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.815747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.830943][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.855242][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.872642][T10541] 8021q: adding VLAN 0 to HW filter on device batadv0 18:02:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:02:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:53 executing program 0: 18:02:53 executing program 5: 18:02:53 executing program 4: 18:02:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) 18:02:53 executing program 5: [ 276.233356][T10555] 9pnet: Insufficient options for proto=fd 18:02:53 executing program 4: 18:02:53 executing program 0: 18:02:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) 18:02:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:53 executing program 0: [ 276.621009][T10575] 9pnet: Insufficient options for proto=fd 18:02:54 executing program 4: 18:02:54 executing program 5: 18:02:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0x14, r4, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) 18:02:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:02:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:02:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 18:02:54 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 18:02:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x1c) 18:02:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:54 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc0305615, &(0x7f0000000040)={0xff000000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r3 = getuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x7) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x37ffff, @ipv4={[], [], @empty}}, 0x1c) 18:02:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:02:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:02:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:02:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:02:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc0305615, &(0x7f0000000040)={0xff000000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r3 = getuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x7) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x37ffff, @ipv4={[], [], @empty}}, 0x1c) 18:02:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 278.164858][T10630] 9pnet: Insufficient options for proto=fd 18:02:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc0305615, &(0x7f0000000040)={0xff000000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r3 = getuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x7) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x37ffff, @ipv4={[], [], @empty}}, 0x1c) 18:02:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:02:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:02:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 278.526929][T10640] 9pnet: Insufficient options for proto=fd [ 280.030561][T10651] IPVS: ftp: loaded support on port[0] = 21 [ 280.099077][T10651] chnl_net:caif_netlink_parms(): no params data found [ 280.125994][T10651] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.133233][T10651] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.141684][T10651] device bridge_slave_0 entered promiscuous mode [ 280.149303][T10651] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.156359][T10651] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.164383][T10651] device bridge_slave_1 entered promiscuous mode [ 280.429719][T10651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.440150][T10651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.580637][T10651] team0: Port device team_slave_0 added [ 280.587239][T10651] team0: Port device team_slave_1 added [ 280.660198][T10651] device hsr_slave_0 entered promiscuous mode [ 280.697840][T10651] device hsr_slave_1 entered promiscuous mode [ 280.767473][T10651] debugfs: Directory 'hsr0' with parent '/' already present! [ 280.906409][T10651] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.913469][T10651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.920812][T10651] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.927920][T10651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.083903][T10651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.094719][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.102866][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.111481][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.121192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 281.134063][T10651] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.271844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.281602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.290023][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.297046][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.310088][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.319220][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.327884][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.334929][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.342674][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.488540][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.497700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.506005][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.516094][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.656772][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.665195][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.677839][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.686017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.821921][T10651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.833238][T10651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.841132][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.849821][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.991920][T10651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.019625][ T9352] device bridge_slave_1 left promiscuous mode [ 282.026093][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.078949][ T9352] device bridge_slave_0 left promiscuous mode [ 282.085103][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.129048][ T9352] device bridge_slave_1 left promiscuous mode [ 282.135152][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.198328][ T9352] device bridge_slave_0 left promiscuous mode [ 282.204463][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.678274][ T9352] device hsr_slave_0 left promiscuous mode [ 285.717628][ T9352] device hsr_slave_1 left promiscuous mode [ 285.796433][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 285.809703][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 285.821723][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.862754][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.954363][ T9352] bond0 (unregistering): Released all slaves [ 286.118126][ T9352] device hsr_slave_0 left promiscuous mode [ 286.167944][ T9352] device hsr_slave_1 left promiscuous mode [ 286.217099][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 286.229958][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 286.240836][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.281637][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.368299][ T9352] bond0 (unregistering): Released all slaves 18:03:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:03:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 18:03:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:03:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) [ 286.686775][T10662] 9pnet: Insufficient options for proto=fd 18:03:04 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 18:03:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 18:03:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:03:05 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:03:05 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) [ 289.350999][T10698] IPVS: ftp: loaded support on port[0] = 21 [ 289.452093][T10698] chnl_net:caif_netlink_parms(): no params data found [ 289.496929][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.505582][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.513238][T10698] device bridge_slave_0 entered promiscuous mode [ 289.521103][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.529100][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.536586][T10698] device bridge_slave_1 entered promiscuous mode [ 289.556762][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.567475][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.584445][T10698] team0: Port device team_slave_0 added [ 289.591526][T10698] team0: Port device team_slave_1 added [ 289.620228][T10698] device hsr_slave_0 entered promiscuous mode [ 289.677650][T10698] device hsr_slave_1 entered promiscuous mode [ 289.746787][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.753871][T10698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.761228][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.768308][T10698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.824290][T10698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.834767][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.844086][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.852850][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.860928][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 289.872798][T10698] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.890661][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.904585][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.911678][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.963962][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.987943][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.994960][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.003597][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.012281][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.284629][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.299053][T10702] IPVS: ftp: loaded support on port[0] = 21 [ 290.310367][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.318670][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.333515][T10703] IPVS: ftp: loaded support on port[0] = 21 [ 290.340872][T10698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.683676][T10698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.856213][T10703] chnl_net:caif_netlink_parms(): no params data found [ 291.290102][T10702] chnl_net:caif_netlink_parms(): no params data found [ 291.300824][T10703] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.308214][T10703] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.315866][T10703] device bridge_slave_0 entered promiscuous mode [ 291.486855][T10703] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.494036][T10703] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.501569][T10703] device bridge_slave_1 entered promiscuous mode [ 291.815057][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.823532][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.831266][T10702] device bridge_slave_0 entered promiscuous mode [ 291.840999][T10703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.852709][T10703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.866760][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.874492][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.882613][T10702] device bridge_slave_1 entered promiscuous mode [ 292.053726][T10703] team0: Port device team_slave_0 added [ 292.061326][T10702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.074916][T10702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.085868][T10703] team0: Port device team_slave_1 added [ 292.103025][T10702] team0: Port device team_slave_0 added [ 292.111566][T10702] team0: Port device team_slave_1 added [ 292.119176][ T9352] device bridge_slave_1 left promiscuous mode [ 292.125316][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.151218][ T9352] device bridge_slave_0 left promiscuous mode [ 292.157886][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.199194][ T9352] batman_adv: batadv0: Interface deactivated: veth3 [ 292.205819][ T9352] batman_adv: batadv0: Removing interface: veth3 [ 292.213502][ T9352] device bridge_slave_1 left promiscuous mode [ 292.219758][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.268249][ T9352] device bridge_slave_0 left promiscuous mode [ 292.274386][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.897981][ T9352] device hsr_slave_0 left promiscuous mode [ 295.937638][ T9352] device hsr_slave_1 left promiscuous mode [ 296.014313][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 296.026798][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 296.037834][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.103845][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.199486][ T9352] bond0 (unregistering): Released all slaves [ 296.408534][ T9352] device hsr_slave_0 left promiscuous mode [ 296.467573][ T9352] device hsr_slave_1 left promiscuous mode [ 296.522732][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 296.534237][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 296.545195][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.603546][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.692926][ T9352] bond0 (unregistering): Released all slaves [ 296.880323][T10703] device hsr_slave_0 entered promiscuous mode [ 296.937735][T10703] device hsr_slave_1 entered promiscuous mode [ 297.007388][T10703] debugfs: Directory 'hsr0' with parent '/' already present! [ 297.060428][T10702] device hsr_slave_0 entered promiscuous mode [ 297.097737][T10702] device hsr_slave_1 entered promiscuous mode [ 297.167395][T10702] debugfs: Directory 'hsr0' with parent '/' already present! [ 297.353872][T10703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.374605][T10702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.394889][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.403439][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.421403][T10703] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.435076][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.443627][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.460187][T10702] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.476030][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.485245][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.500288][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.507374][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.542438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.552788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.565808][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.577116][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.584199][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.599592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.613153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.623857][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.630945][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.645064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.653672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.668594][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.675635][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.689682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.702236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.713239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.758911][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.774233][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.796132][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.804959][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.820884][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.832885][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.844962][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.856521][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.871358][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.882031][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.895275][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.906370][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.922522][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.933575][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.946009][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.961536][T10702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.981387][T10702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.994792][T10703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.012874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.023594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.035968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.082825][T10702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.109005][T10703] 8021q: adding VLAN 0 to HW filter on device batadv0 18:03:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:03:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:15 executing program 1: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 18:03:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:03:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:15 executing program 1: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 18:03:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 18:03:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 18:03:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:03:17 executing program 1: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 300.815915][T10772] IPVS: ftp: loaded support on port[0] = 21 [ 300.875670][T10772] chnl_net:caif_netlink_parms(): no params data found [ 300.904836][T10772] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.912235][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.920172][T10772] device bridge_slave_0 entered promiscuous mode [ 301.314708][T10772] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.321847][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.329890][T10772] device bridge_slave_1 entered promiscuous mode [ 301.542867][T10772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.553889][T10772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.761022][T10772] team0: Port device team_slave_0 added [ 301.768968][T10772] team0: Port device team_slave_1 added [ 301.838953][T10772] device hsr_slave_0 entered promiscuous mode [ 301.887794][T10772] device hsr_slave_1 entered promiscuous mode [ 301.927561][T10772] debugfs: Directory 'hsr0' with parent '/' already present! [ 302.155669][T10772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.169296][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 302.179731][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.187245][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.198305][T10772] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.396724][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.405489][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.413878][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.421041][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.431454][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.439235][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.448206][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.456439][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.463498][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.475725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.484650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.497548][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.506112][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.517954][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.526289][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.535049][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.744350][T10772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.755082][T10772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.766861][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.775693][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.784010][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.792556][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.801288][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.006538][T10772] 8021q: adding VLAN 0 to HW filter on device batadv0 18:03:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:03:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:03:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 303.569848][ T9352] device bridge_slave_1 left promiscuous mode [ 303.576065][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state 18:03:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 303.625754][T10783] 9pnet: Insufficient options for proto=fd [ 303.688258][ T9352] device bridge_slave_0 left promiscuous mode [ 303.694569][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:03:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 303.819237][ T9352] device bridge_slave_1 left promiscuous mode [ 303.835664][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.931653][ T9352] device bridge_slave_0 left promiscuous mode [ 303.939165][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:03:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 303.999692][ T9352] device bridge_slave_1 left promiscuous mode [ 304.005876][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state 18:03:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 304.068243][ T9352] device bridge_slave_0 left promiscuous mode [ 304.087714][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:03:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 309.957833][ T9352] device hsr_slave_0 left promiscuous mode [ 310.007583][ T9352] device hsr_slave_1 left promiscuous mode [ 310.084636][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 310.098476][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 310.109251][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.172997][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.264246][ T9352] bond0 (unregistering): Released all slaves [ 310.439137][ T9352] device hsr_slave_0 left promiscuous mode [ 310.497482][ T9352] device hsr_slave_1 left promiscuous mode [ 310.567229][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 310.580336][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 310.590418][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.631400][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.717421][ T9352] bond0 (unregistering): Released all slaves [ 310.867963][ T9352] device hsr_slave_0 left promiscuous mode [ 310.907574][ T9352] device hsr_slave_1 left promiscuous mode [ 310.955109][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 310.969866][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 310.981996][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.021172][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.089184][ T9352] bond0 (unregistering): Released all slaves 18:03:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 311.344235][T10811] IPVS: ftp: loaded support on port[0] = 21 [ 311.360254][T10813] IPVS: ftp: loaded support on port[0] = 21 [ 311.538547][T10813] chnl_net:caif_netlink_parms(): no params data found [ 311.556636][T10811] chnl_net:caif_netlink_parms(): no params data found [ 311.604256][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.611840][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.619534][T10811] device bridge_slave_0 entered promiscuous mode [ 311.632627][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.640366][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.648044][T10811] device bridge_slave_1 entered promiscuous mode [ 311.660194][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.667244][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.675338][T10813] device bridge_slave_0 entered promiscuous mode [ 311.683163][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.690514][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.698041][T10813] device bridge_slave_1 entered promiscuous mode [ 311.721445][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.732065][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.743374][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.764982][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.776984][T10811] team0: Port device team_slave_0 added [ 311.783862][T10811] team0: Port device team_slave_1 added [ 311.812477][T10813] team0: Port device team_slave_0 added [ 311.821659][T10813] team0: Port device team_slave_1 added [ 311.870245][T10811] device hsr_slave_0 entered promiscuous mode [ 311.938590][T10811] device hsr_slave_1 entered promiscuous mode [ 312.040097][T10813] device hsr_slave_0 entered promiscuous mode [ 312.107781][T10813] device hsr_slave_1 entered promiscuous mode [ 312.177502][T10813] debugfs: Directory 'hsr0' with parent '/' already present! [ 312.330997][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.338117][T10811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.345392][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.352479][T10811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.430155][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.443269][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.531940][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.551837][T10811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.571499][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.588142][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.597746][T10811] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.610124][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.617299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.625291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.635067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.644910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.653825][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.660913][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.689731][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.698706][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.707099][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.714170][ T9027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.728863][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.743702][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.753353][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.768919][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.782636][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.789732][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.803644][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.812642][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.833002][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.840090][ T9027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.854024][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.862782][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.906722][T10813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.923838][T10813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.944117][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.952634][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.973772][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.986925][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.002755][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.013609][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.026517][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.041376][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.052275][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.065263][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.077043][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.092069][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.103051][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.121476][T10811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.139288][T10811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.174162][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.185056][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.200278][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.228225][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.235882][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.245034][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.254344][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.272269][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.283923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.319095][T10811] 8021q: adding VLAN 0 to HW filter on device batadv0 18:03:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:30 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r5) 18:03:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 313.723588][T10835] 9pnet: Insufficient options for proto=fd 18:03:31 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:31 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 315.276211][T10866] 9pnet: Insufficient options for proto=fd [ 315.906345][T10873] IPVS: ftp: loaded support on port[0] = 21 [ 315.981202][T10873] chnl_net:caif_netlink_parms(): no params data found [ 316.382417][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.390814][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.399776][T10873] device bridge_slave_0 entered promiscuous mode [ 316.597187][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.604376][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.612423][T10873] device bridge_slave_1 entered promiscuous mode [ 316.631769][T10873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.841225][T10873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.863740][T10873] team0: Port device team_slave_0 added [ 316.872052][T10873] team0: Port device team_slave_1 added [ 317.149559][T10873] device hsr_slave_0 entered promiscuous mode [ 317.187662][T10873] device hsr_slave_1 entered promiscuous mode [ 317.237515][T10873] debugfs: Directory 'hsr0' with parent '/' already present! [ 317.465074][T10873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.673071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.680955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.689768][T10873] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.898526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.906970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.915609][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.922685][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.931322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.940223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.948569][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.955595][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.963114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.972320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.981083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.996164][T10873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.006643][ T0] NOHZ: local_softirq_pending 08 [ 318.010037][T10873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.023887][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.032522][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.041210][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.050465][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.059200][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.067391][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.075651][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.085350][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.093863][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.101737][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.313769][T10873] 8021q: adding VLAN 0 to HW filter on device batadv0 18:03:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r5) 18:03:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:03:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 319.748882][ T9352] device bridge_slave_1 left promiscuous mode [ 319.755182][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.810224][ T9352] device bridge_slave_0 left promiscuous mode [ 319.822921][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.890810][ T9352] device bridge_slave_1 left promiscuous mode [ 319.903869][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.968307][ T9352] device bridge_slave_0 left promiscuous mode [ 319.974494][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.029222][ T9352] device bridge_slave_1 left promiscuous mode [ 320.035416][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.088241][ T9352] device bridge_slave_0 left promiscuous mode [ 320.094416][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.438160][ T9352] device hsr_slave_0 left promiscuous mode [ 325.478596][ T9352] device hsr_slave_1 left promiscuous mode [ 325.527214][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 325.540354][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 325.550655][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.590716][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.677780][ T9352] bond0 (unregistering): Released all slaves [ 325.838258][ T9352] device hsr_slave_0 left promiscuous mode [ 325.877501][ T9352] device hsr_slave_1 left promiscuous mode [ 325.944818][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 325.957117][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 325.968930][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.042932][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.131495][ T9352] bond0 (unregistering): Released all slaves [ 326.258311][ T9352] device hsr_slave_0 left promiscuous mode [ 326.298381][ T9352] device hsr_slave_1 left promiscuous mode [ 326.347019][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 326.360079][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 326.370415][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.411164][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.493017][ T9352] bond0 (unregistering): Released all slaves 18:03:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r5) [ 326.615561][T10918] IPVS: ftp: loaded support on port[0] = 21 [ 326.621102][T10916] IPVS: ftp: loaded support on port[0] = 21 [ 326.781994][T10916] chnl_net:caif_netlink_parms(): no params data found [ 326.829624][T10918] chnl_net:caif_netlink_parms(): no params data found [ 326.840879][T10916] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.848204][T10916] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.855758][T10916] device bridge_slave_0 entered promiscuous mode [ 326.863447][T10916] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.870599][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.878529][T10916] device bridge_slave_1 entered promiscuous mode [ 326.914444][T10916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.930243][T10916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.939652][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.946676][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.954835][T10918] device bridge_slave_0 entered promiscuous mode [ 326.974698][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.981826][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.990025][T10918] device bridge_slave_1 entered promiscuous mode [ 326.997985][T10916] team0: Port device team_slave_0 added [ 327.012794][T10916] team0: Port device team_slave_1 added [ 327.125686][T10918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.190705][T10918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.230099][T10916] device hsr_slave_0 entered promiscuous mode [ 327.267673][T10916] device hsr_slave_1 entered promiscuous mode [ 327.357128][T10918] team0: Port device team_slave_0 added [ 327.366632][T10918] team0: Port device team_slave_1 added [ 327.395472][T10916] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.402588][T10916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.409944][T10916] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.416987][T10916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.480002][T10918] device hsr_slave_0 entered promiscuous mode [ 327.517615][T10918] device hsr_slave_1 entered promiscuous mode [ 327.557399][T10918] debugfs: Directory 'hsr0' with parent '/' already present! [ 327.604576][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.611685][T10918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.619062][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.626107][T10918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.682738][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.693280][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.706807][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.716669][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.758321][T10916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.796022][T10918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.816950][T10916] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.824516][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.841761][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.865129][T10918] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.873813][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.889514][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.903704][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.910873][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.927020][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.935753][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.944617][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.951699][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.960154][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.967982][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.975579][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.999592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.009005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.017962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.026347][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.033413][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.041753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.051156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.059834][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.066874][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.075038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.083453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.106041][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.114365][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.123729][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.132522][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.140995][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.149513][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.158143][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.166561][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.175505][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.184043][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.192208][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.200548][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.208756][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.216846][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.225240][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.233024][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.244382][T10916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.271192][T10918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.283339][T10918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.300389][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.309352][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.328414][T10916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.340765][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0 18:03:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:03:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, 0xffffffffffffffff) 18:03:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:03:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 331.071220][T10977] IPVS: ftp: loaded support on port[0] = 21 [ 331.145183][T10977] chnl_net:caif_netlink_parms(): no params data found [ 331.173154][T10977] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.180407][T10977] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.188025][T10977] device bridge_slave_0 entered promiscuous mode [ 331.195530][T10977] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.202687][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.210314][T10977] device bridge_slave_1 entered promiscuous mode [ 331.616618][T10977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.627287][T10977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.643900][T10977] team0: Port device team_slave_0 added [ 331.651458][T10977] team0: Port device team_slave_1 added [ 331.910066][T10977] device hsr_slave_0 entered promiscuous mode [ 331.947754][T10977] device hsr_slave_1 entered promiscuous mode [ 331.987510][T10977] debugfs: Directory 'hsr0' with parent '/' already present! [ 332.214221][T10977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.417292][T10977] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.425475][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 332.435026][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.442585][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.647914][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.656335][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.664766][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.671817][ T9023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.679794][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.688660][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.696881][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.703958][ T9023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.711404][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.720207][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.731207][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.739089][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.747647][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.756113][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.958511][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.966924][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.978730][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.986921][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.002188][T10977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.013430][T10977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.022859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.031331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.246986][T10977] 8021q: adding VLAN 0 to HW filter on device batadv0 18:03:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, 0xffffffffffffffff) 18:03:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:03:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:03:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:03:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 333.789678][ T9352] device bridge_slave_1 left promiscuous mode [ 333.795900][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state 18:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 333.918463][ T9352] device bridge_slave_0 left promiscuous mode [ 333.929238][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 334.019649][ T9352] device bridge_slave_1 left promiscuous mode [ 334.025857][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.142014][ T9352] device bridge_slave_0 left promiscuous mode [ 334.153262][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:03:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 334.219092][ T9352] device bridge_slave_1 left promiscuous mode [ 334.225271][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state 18:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 334.329749][ T9352] device bridge_slave_0 left promiscuous mode [ 334.341580][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 340.258687][ T9352] device hsr_slave_0 left promiscuous mode [ 340.298410][ T9352] device hsr_slave_1 left promiscuous mode [ 340.374638][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 340.388955][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 340.402936][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.471413][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.537016][ T9352] bond0 (unregistering): Released all slaves [ 340.668253][ T9352] device hsr_slave_0 left promiscuous mode [ 340.727558][ T9352] device hsr_slave_1 left promiscuous mode [ 340.787718][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 340.798846][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 340.809623][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.873564][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.974318][ T9352] bond0 (unregistering): Released all slaves [ 341.138508][ T9352] device hsr_slave_0 left promiscuous mode [ 341.177620][ T9352] device hsr_slave_1 left promiscuous mode [ 341.248375][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 341.263313][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 341.274150][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.303771][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.400437][ T9352] bond0 (unregistering): Released all slaves [ 341.682980][T11019] IPVS: ftp: loaded support on port[0] = 21 [ 341.693339][T11017] IPVS: ftp: loaded support on port[0] = 21 18:03:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, 0xffffffffffffffff) 18:03:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:03:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 341.967223][T11019] chnl_net:caif_netlink_parms(): no params data found [ 341.992901][T11017] chnl_net:caif_netlink_parms(): no params data found [ 342.040236][T11019] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.047436][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.055410][T11019] device bridge_slave_0 entered promiscuous mode [ 342.093407][T11019] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.100568][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.108661][T11019] device bridge_slave_1 entered promiscuous mode [ 342.122867][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.130197][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.138157][T11017] device bridge_slave_0 entered promiscuous mode [ 342.156000][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.163199][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.172016][T11017] device bridge_slave_1 entered promiscuous mode [ 342.196051][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.294281][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.335163][T11019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.358947][T11019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.375123][T11017] team0: Port device team_slave_0 added [ 342.388857][T11017] team0: Port device team_slave_1 added [ 342.402477][T11019] team0: Port device team_slave_0 added [ 342.415723][T11019] team0: Port device team_slave_1 added [ 342.490124][T11019] device hsr_slave_0 entered promiscuous mode [ 342.537721][T11019] device hsr_slave_1 entered promiscuous mode [ 342.700175][T11017] device hsr_slave_0 entered promiscuous mode [ 342.737686][T11017] device hsr_slave_1 entered promiscuous mode [ 342.777479][T11017] debugfs: Directory 'hsr0' with parent '/' already present! [ 342.906498][T11019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.945211][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.953877][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.975517][T11017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.992481][T11019] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.015447][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.030706][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.045940][T11017] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.067817][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.076735][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.085537][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.092617][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.100309][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.109175][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.119058][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.126074][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.134051][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.164080][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.173297][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.188525][ T2855] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.195664][ T2855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.210089][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.220552][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.229307][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.237955][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.246552][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.255129][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.273808][T11019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.284355][T11019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.296651][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.309029][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.320779][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.329828][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.338386][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.345415][T10771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.353139][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.361567][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.370067][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.378735][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.387164][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.410561][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.421399][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.431584][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.440110][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.448729][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.457059][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.466098][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.477233][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.485625][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.500848][T11017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.512421][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.522865][T11019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.531109][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.540046][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.592034][T11017] 8021q: adding VLAN 0 to HW filter on device batadv0 18:04:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:04:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:04:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:04:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x5420, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x6a}], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}], 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) 18:04:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r2) 18:04:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) pipe(&(0x7f0000000000)) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:04:02 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 346.395017][T11081] IPVS: ftp: loaded support on port[0] = 21 [ 346.826123][T11081] chnl_net:caif_netlink_parms(): no params data found [ 346.854465][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.862851][T11081] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.870810][T11081] device bridge_slave_0 entered promiscuous mode [ 347.069114][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.076263][T11081] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.085307][T11081] device bridge_slave_1 entered promiscuous mode [ 347.101336][T11081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.305156][T11081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.324066][T11081] team0: Port device team_slave_0 added [ 347.331345][T11081] team0: Port device team_slave_1 added [ 347.390121][T11081] device hsr_slave_0 entered promiscuous mode [ 347.450610][T11081] device hsr_slave_1 entered promiscuous mode [ 347.487664][T11081] debugfs: Directory 'hsr0' with parent '/' already present! [ 347.685816][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.692875][T11081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.700233][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.707263][T11081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.930876][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.940529][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.952767][T11081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.964720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.972799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.984059][T11081] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.183834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.193115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.201448][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.208494][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.414763][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.423410][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.431801][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.438879][ T9027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.457866][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.466439][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.475263][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.484201][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.493971][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.502603][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.511309][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.519554][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.527857][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.725266][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.733935][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.743268][T11081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.954268][T11081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.979658][ T9352] device bridge_slave_1 left promiscuous mode [ 348.985915][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.028738][ T9352] device bridge_slave_0 left promiscuous mode [ 349.034861][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.089253][ T9352] device bridge_slave_1 left promiscuous mode [ 349.095370][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.138530][ T9352] device bridge_slave_0 left promiscuous mode [ 349.144649][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.189092][ T9352] device bridge_slave_1 left promiscuous mode [ 349.195205][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.257884][ T9352] device bridge_slave_0 left promiscuous mode [ 349.263991][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.478085][ T9352] device hsr_slave_0 left promiscuous mode [ 354.517513][ T9352] device hsr_slave_1 left promiscuous mode [ 354.586890][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 354.599788][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 354.610105][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.681607][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.774036][ T9352] bond0 (unregistering): Released all slaves [ 354.948201][ T9352] device hsr_slave_0 left promiscuous mode [ 355.007521][ T9352] device hsr_slave_1 left promiscuous mode [ 355.074565][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 355.088077][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 355.099060][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.171213][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.244240][ T9352] bond0 (unregistering): Released all slaves [ 355.398462][ T9352] device hsr_slave_0 left promiscuous mode [ 355.439352][ T9352] device hsr_slave_1 left promiscuous mode [ 355.514450][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 355.527033][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 355.538482][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.571710][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.652865][ T9352] bond0 (unregistering): Released all slaves 18:04:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:13 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 18:04:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:04:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB='uid=']) 18:04:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 356.370977][T11103] FAT-fs (loop2): Unrecognized mount option "uid=" or missing value [ 356.470843][T11103] FAT-fs (loop2): Unrecognized mount option "uid=" or missing value 18:04:13 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000000c0)="c4e27d78f066b80a008ec066b8fb000f00d86541d37f09f341f42e3e66450f382b890030000066400f383ea70048000066baf80cb8c4f1ec8def66bafc0cb877000000efc443597ce9050f20e035004000000f22e0", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4ce, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:04:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 358.130834][T11130] IPVS: ftp: loaded support on port[0] = 21 [ 358.235596][T11130] chnl_net:caif_netlink_parms(): no params data found [ 358.283730][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.293958][T11130] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.303997][T11130] device bridge_slave_0 entered promiscuous mode [ 358.315274][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.324452][T11130] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.339621][T11130] device bridge_slave_1 entered promiscuous mode [ 358.366257][T11130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.382103][T11130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.413407][T11130] team0: Port device team_slave_0 added [ 358.425055][T11130] team0: Port device team_slave_1 added [ 358.500053][T11130] device hsr_slave_0 entered promiscuous mode [ 358.537634][T11130] device hsr_slave_1 entered promiscuous mode [ 358.594986][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.602050][T11130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.609405][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.616477][T11130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.650236][T11130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.661765][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.670636][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.678489][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.686373][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 358.698290][T11130] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.707937][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.716216][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.723283][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.739411][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.748767][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.755812][ T9027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.780372][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.793775][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.819604][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.839344][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.867689][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.877221][T11130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.895974][T11133] IPVS: ftp: loaded support on port[0] = 21 [ 358.903820][T11130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.215057][T11133] chnl_net:caif_netlink_parms(): no params data found [ 359.244911][T11133] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.252465][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.260523][T11133] device bridge_slave_0 entered promiscuous mode [ 359.332099][T11133] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.339901][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.348195][T11133] device bridge_slave_1 entered promiscuous mode [ 359.445886][T11133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.610138][T11133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.698089][T11133] team0: Port device team_slave_0 added [ 359.711290][T11133] team0: Port device team_slave_1 added [ 359.869991][T11133] device hsr_slave_0 entered promiscuous mode [ 359.887736][T11133] device hsr_slave_1 entered promiscuous mode [ 359.927508][T11133] debugfs: Directory 'hsr0' with parent '/' already present! [ 360.030892][T11133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.110029][T11133] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.118264][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 360.128547][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.136115][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.146786][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.156484][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.164833][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.171877][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.248741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.256645][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.265290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.273802][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.280894][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.363143][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 360.371877][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.380552][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.390335][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.399069][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.407737][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.416277][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.429133][ T9352] device bridge_slave_1 left promiscuous mode [ 360.435275][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.458305][ T9352] device bridge_slave_0 left promiscuous mode [ 360.464438][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.217837][ T9352] device hsr_slave_0 left promiscuous mode [ 362.287494][ T9352] device hsr_slave_1 left promiscuous mode [ 362.354558][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 362.367883][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 362.378742][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.413841][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.503637][ T9352] bond0 (unregistering): Released all slaves [ 362.621246][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.630044][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.643585][T11133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.654740][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.664517][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.673114][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.693512][T11133] 8021q: adding VLAN 0 to HW filter on device batadv0 18:04:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x82, 0x4, 0x5, 0x0, r1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000001c0)={r2, 0x0, 0x70f000}, 0x20) 18:04:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 363.071932][T11152] 9pnet: Insufficient options for proto=fd 18:04:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x3, 0x20000014, @ipv4=@multicast1=0x4000a03}]}]}, 0x24}}, 0x0) [ 363.283457][T11160] 9pnet: Insufficient options for proto=fd 18:04:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 363.415323][T11166] openvswitch: netlink: Message has 8 unknown bytes. 18:04:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 363.969075][T11165] openvswitch: netlink: Message has 8 unknown bytes. 18:04:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 365.217719][T11185] IPVS: ftp: loaded support on port[0] = 21 [ 365.280087][T11185] chnl_net:caif_netlink_parms(): no params data found [ 365.306640][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.314130][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.321885][T11185] device bridge_slave_0 entered promiscuous mode [ 365.575851][T11185] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.583065][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.591039][T11185] device bridge_slave_1 entered promiscuous mode [ 365.769784][T11185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.780415][T11185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.800935][T11185] team0: Port device team_slave_0 added [ 365.808048][T11185] team0: Port device team_slave_1 added [ 365.819274][T11188] IPVS: ftp: loaded support on port[0] = 21 [ 365.870278][T11185] device hsr_slave_0 entered promiscuous mode [ 365.927627][T11185] device hsr_slave_1 entered promiscuous mode [ 365.977519][T11185] debugfs: Directory 'hsr0' with parent '/' already present! [ 366.146238][T11185] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.153446][T11185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.160809][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.167874][T11185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.333266][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.343642][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.498033][T11188] chnl_net:caif_netlink_parms(): no params data found [ 366.538016][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.545247][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.553585][T11188] device bridge_slave_0 entered promiscuous mode [ 366.563116][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.570396][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.578361][T11188] device bridge_slave_1 entered promiscuous mode [ 366.726501][T11188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.742288][T11188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.916169][T11188] team0: Port device team_slave_0 added [ 366.923284][T11188] team0: Port device team_slave_1 added [ 367.130381][T11188] device hsr_slave_0 entered promiscuous mode [ 367.197706][T11188] device hsr_slave_1 entered promiscuous mode [ 367.247521][T11188] debugfs: Directory 'hsr0' with parent '/' already present! [ 367.384569][T11185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.411914][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.421657][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.431895][ T9352] device bridge_slave_1 left promiscuous mode [ 367.438203][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.468680][ T9352] device bridge_slave_0 left promiscuous mode [ 367.474951][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.532255][ T9352] device bridge_slave_1 left promiscuous mode [ 367.538598][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.588515][ T9352] device bridge_slave_0 left promiscuous mode [ 367.594814][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.167786][ T9352] device hsr_slave_0 left promiscuous mode [ 371.227512][ T9352] device hsr_slave_1 left promiscuous mode [ 371.314520][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 371.327572][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 371.339452][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.423730][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.522978][ T9352] bond0 (unregistering): Released all slaves [ 371.698087][ T9352] device hsr_slave_0 left promiscuous mode [ 371.737701][ T9352] device hsr_slave_1 left promiscuous mode [ 371.794602][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 371.807214][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 371.818525][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.863472][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.959409][ T9352] bond0 (unregistering): Released all slaves [ 372.054348][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.070672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.079611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.088894][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.095935][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.110240][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.120633][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.129182][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.136218][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.144108][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 372.161276][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.169974][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 372.178846][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.187131][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 372.208890][T11188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.215686][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.224360][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.233038][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.241447][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.249757][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.258112][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.268731][T11185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.288469][T11188] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.305673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.313414][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.332303][T11185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.348017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.356594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.374103][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.381187][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.388743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.397129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.405831][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.412904][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.420509][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 372.429074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.437547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 372.445903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.455623][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.463481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 372.478032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.486694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.495876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.508058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.520896][T11188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.532572][T11188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.545645][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.554513][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.574904][T11188] 8021q: adding VLAN 0 to HW filter on device batadv0 18:04:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:30 executing program 2: 18:04:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:04:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 373.285314][T11208] 9pnet: Insufficient options for proto=fd 18:04:30 executing program 2: 18:04:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:30 executing program 2: 18:04:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:04:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:31 executing program 2: 18:04:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 375.250846][T11231] IPVS: ftp: loaded support on port[0] = 21 [ 375.456230][T11231] chnl_net:caif_netlink_parms(): no params data found [ 375.514922][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.522208][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.530252][T11231] device bridge_slave_0 entered promiscuous mode [ 375.539210][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.546264][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.553959][T11231] device bridge_slave_1 entered promiscuous mode [ 375.569202][T11231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.579612][T11231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.596515][T11231] team0: Port device team_slave_0 added [ 375.603785][T11231] team0: Port device team_slave_1 added [ 375.680224][T11231] device hsr_slave_0 entered promiscuous mode [ 375.718766][T11231] device hsr_slave_1 entered promiscuous mode [ 376.069344][T11234] IPVS: ftp: loaded support on port[0] = 21 [ 376.075128][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.082348][T11231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.089661][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.096697][T11231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.447224][T11234] chnl_net:caif_netlink_parms(): no params data found [ 376.647058][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.655576][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.676938][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.684600][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.692895][T11234] device bridge_slave_0 entered promiscuous mode [ 376.704434][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.715083][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.725402][T11237] IPVS: ftp: loaded support on port[0] = 21 [ 376.729677][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.741048][T11234] device bridge_slave_1 entered promiscuous mode [ 376.892698][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.905203][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.920788][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.928837][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.083376][T11231] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.092260][T11234] team0: Port device team_slave_0 added [ 377.101739][T11234] team0: Port device team_slave_1 added [ 377.254693][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.263404][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.271863][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.278964][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.340299][T11234] device hsr_slave_0 entered promiscuous mode [ 377.377691][T11234] device hsr_slave_1 entered promiscuous mode [ 377.427530][T11234] debugfs: Directory 'hsr0' with parent '/' already present! [ 377.518766][ T0] NOHZ: local_softirq_pending 08 [ 377.588719][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.597250][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.605668][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.612758][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.620860][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.629675][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.638261][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.646608][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.654974][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.663298][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.705361][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.868670][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.877010][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.885272][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.894000][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.906433][T11231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.915043][T11237] chnl_net:caif_netlink_parms(): no params data found [ 377.941629][ T9352] device bridge_slave_1 left promiscuous mode [ 377.948728][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.009375][ T9352] device bridge_slave_0 left promiscuous mode [ 378.015595][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.069515][ T9352] device bridge_slave_1 left promiscuous mode [ 378.075674][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.148427][ T9352] device bridge_slave_0 left promiscuous mode [ 378.154625][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.728047][ T9352] device hsr_slave_0 left promiscuous mode [ 381.767626][ T9352] device hsr_slave_1 left promiscuous mode [ 381.814250][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 381.828122][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 381.839687][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.901154][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.988855][ T9352] bond0 (unregistering): Released all slaves [ 382.128126][ T9352] device hsr_slave_0 left promiscuous mode [ 382.167497][ T9352] device hsr_slave_1 left promiscuous mode [ 382.217052][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 382.230093][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 382.241690][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.281449][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.369617][ T9352] bond0 (unregistering): Released all slaves [ 382.474036][T11237] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.481437][T11237] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.489330][T11237] device bridge_slave_0 entered promiscuous mode [ 382.505995][T11231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.528183][T11237] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.535303][T11237] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.543552][T11237] device bridge_slave_1 entered promiscuous mode [ 382.585214][T11237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.609798][T11234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.618349][T11237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.637039][T11237] team0: Port device team_slave_0 added [ 382.645254][T11237] team0: Port device team_slave_1 added [ 382.696034][T11237] device hsr_slave_0 entered promiscuous mode [ 382.728430][T11237] device hsr_slave_1 entered promiscuous mode 18:04:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:40 executing program 2: 18:04:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 382.787535][T11237] debugfs: Directory 'hsr0' with parent '/' already present! [ 382.799747][T11234] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.809857][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.818443][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.861826][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.881635][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 18:04:40 executing program 2: 18:04:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 382.906169][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.913388][T10543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.925567][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.959314][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.996953][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.004058][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.037129][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.311094][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.387415][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.396113][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.405065][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.423454][T11234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.434754][T11234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.451359][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.474802][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.500831][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.518018][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.526295][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.535023][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.543849][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.558943][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.604324][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.634899][T11237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.650977][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.659777][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.679238][T11237] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.689867][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.708201][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.725186][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.732254][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.759261][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.767124][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.776498][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.785511][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.792620][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.857055][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.872073][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.882858][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.895917][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.914982][T11237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.932358][T11237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.947303][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.962177][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.975135][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.990468][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.003319][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.014294][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.027233][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.056885][T11237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.074240][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:04:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:04:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_emit_ethernet(0x87, &(0x7f0000000700)={@dev={[], 0xb}, @random="2d900300", [{[], {0x8100, 0x5, 0x0, 0x3}}], {@generic={0x0, "4eb6f94f7f0f18ef6885a5e94476d0bf7d8978d803a3b6ca8472aa46af76fe99fc0d6c2c06aa51a16adf3b65a2d683c183046c4239b705c20e2d5b372084224412a3fe77647b67720126767bebdae34610c72f92911859198d9106bc9e6311a95269e2c4d38bfdc6130c8a32f7ca81f9b55316df5c"}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:04:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:04:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_emit_ethernet(0x87, &(0x7f0000000700)={@dev={[], 0xb}, @random="2d900300", [{[], {0x8100, 0x5, 0x0, 0x3}}], {@generic={0x0, "4eb6f94f7f0f18ef6885a5e94476d0bf7d8978d803a3b6ca8472aa46af76fe99fc0d6c2c06aa51a16adf3b65a2d683c183046c4239b705c20e2d5b372084224412a3fe77647b67720126767bebdae34610c72f92911859198d9106bc9e6311a95269e2c4d38bfdc6130c8a32f7ca81f9b55316df5c"}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:04:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:04:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7]}, 0x2}, 0x1c) 18:04:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:42 executing program 2: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1, 0xc98fad843840be07) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000200), &(0x7f0000000240)) 18:04:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 386.894205][T11320] IPVS: ftp: loaded support on port[0] = 21 [ 386.958728][T11320] chnl_net:caif_netlink_parms(): no params data found [ 386.986651][T11320] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.993818][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.001435][T11320] device bridge_slave_0 entered promiscuous mode [ 387.009793][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.016854][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.024566][T11320] device bridge_slave_1 entered promiscuous mode [ 387.460381][T11320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.471599][T11320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.491015][T11320] team0: Port device team_slave_0 added [ 387.685808][T11320] team0: Port device team_slave_1 added [ 387.699189][T11323] IPVS: ftp: loaded support on port[0] = 21 [ 387.960707][T11320] device hsr_slave_0 entered promiscuous mode [ 388.007814][T11320] device hsr_slave_1 entered promiscuous mode [ 388.057589][T11320] debugfs: Directory 'hsr0' with parent '/' already present! [ 388.529703][T11323] chnl_net:caif_netlink_parms(): no params data found [ 388.766958][T11323] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.774289][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.782267][T11323] device bridge_slave_0 entered promiscuous mode [ 388.790534][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.798095][T11323] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.805641][T11323] device bridge_slave_1 entered promiscuous mode [ 389.017752][T11323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.037004][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.046714][T11323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.265440][T11323] team0: Port device team_slave_0 added [ 389.274071][T11323] team0: Port device team_slave_1 added [ 389.284749][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.292828][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.312925][T11320] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.570313][T11323] device hsr_slave_0 entered promiscuous mode [ 389.608015][T11323] device hsr_slave_1 entered promiscuous mode [ 389.647512][T11323] debugfs: Directory 'hsr0' with parent '/' already present! [ 389.660208][ T9352] device bridge_slave_1 left promiscuous mode [ 389.666351][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.718905][ T9352] device bridge_slave_0 left promiscuous mode [ 389.725136][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.778782][ T9352] device bridge_slave_1 left promiscuous mode [ 389.784993][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.829892][ T9352] device bridge_slave_0 left promiscuous mode [ 389.836040][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.888576][ T9352] device bridge_slave_1 left promiscuous mode [ 389.894707][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.938466][ T9352] device bridge_slave_0 left promiscuous mode [ 389.944717][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.327825][ T9352] device hsr_slave_0 left promiscuous mode [ 395.377544][ T9352] device hsr_slave_1 left promiscuous mode [ 395.427307][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 395.440294][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 395.454077][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.501667][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.581821][ T9352] bond0 (unregistering): Released all slaves [ 395.738173][ T9352] device hsr_slave_0 left promiscuous mode [ 395.807534][ T9352] device hsr_slave_1 left promiscuous mode [ 395.874481][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 395.888195][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 395.899267][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.950647][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.044115][ T9352] bond0 (unregistering): Released all slaves [ 396.227989][ T9352] device hsr_slave_0 left promiscuous mode [ 396.297556][ T9352] device hsr_slave_1 left promiscuous mode [ 396.359171][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 396.371404][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 396.382224][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.420902][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.514902][ T9352] bond0 (unregistering): Released all slaves [ 396.612685][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.621962][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.630336][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.637420][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.645968][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.666475][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.677239][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.685830][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.692916][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.700496][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.717808][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.726417][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.736051][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.745605][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.754064][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.770709][T11320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.782954][T11320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.794541][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.802667][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.811115][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.819549][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.828056][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.836236][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.864818][T11320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.919885][T11323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.034703][T11323] 8021q: adding VLAN 0 to HW filter on device team0 18:04:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:04:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) [ 397.087445][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.115875][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.171583][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.201567][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.213559][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.220682][T10771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.254201][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.291135][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.321417][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.328635][T10771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.362979][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.862594][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.876055][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.885034][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.901875][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.914074][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.925107][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.946502][T11323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.962757][T11323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.983452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.992167][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.009807][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.023662][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.032505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.057229][T11323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.072284][T10771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:04:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:04:55 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fa) sendfile(r0, r1, 0x0, 0x8000fffffffe) 18:04:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 398.450039][ T26] audit: type=1804 audit(1570903495.624:103): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir079614891/syzkaller.6NMQMp/108/bus" dev="sda1" ino=16849 res=1 18:04:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 398.558339][ T26] audit: type=1804 audit(1570903495.654:104): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir079614891/syzkaller.6NMQMp/108/bus" dev="sda1" ino=16849 res=1 18:04:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 398.742756][ T26] audit: type=1804 audit(1570903495.914:105): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir079614891/syzkaller.6NMQMp/108/bus" dev="sda1" ino=16849 res=1 18:04:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:56 executing program 2: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sysinfo(&(0x7f0000000180)=""/211) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:04:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x80800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000440)={'lo\x00'}) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000240)={0x0, 0x3a1, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x44882) sendto$inet6(r2, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0xfffffffffffffdf0) [ 399.206330][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 399.474612][T11373] IPVS: ftp: loaded support on port[0] = 21 [ 399.605313][T11379] device lo entered promiscuous mode [ 399.657685][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 399.847818][T11373] chnl_net:caif_netlink_parms(): no params data found [ 399.893745][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.903275][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.912762][T11373] device bridge_slave_0 entered promiscuous mode [ 399.946491][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.953727][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.968742][T11373] device bridge_slave_1 entered promiscuous mode [ 399.995957][T11373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.015734][T11373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.045402][T11373] team0: Port device team_slave_0 added [ 400.059201][T11373] team0: Port device team_slave_1 added [ 400.120293][T11373] device hsr_slave_0 entered promiscuous mode [ 400.167801][T11373] device hsr_slave_1 entered promiscuous mode [ 400.218805][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.225950][T11373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.233350][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.240415][T11373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.276685][T11373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.292772][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.301231][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.308751][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.322270][T11373] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.332114][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.340969][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.340997][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.348672][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.364691][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.371760][ T9027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.399686][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 400.408394][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 400.416819][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.425462][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.435440][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 400.451151][T11373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 400.504095][T11373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.569500][T11389] IPVS: ftp: loaded support on port[0] = 21 [ 400.685750][T11389] chnl_net:caif_netlink_parms(): no params data found 18:04:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:04:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:04:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:04:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:04:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002400e50d0000000000e2341000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000600020000000000"], 0x40}}, 0x0) [ 401.041635][T11389] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.049090][T11389] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.088046][T11389] device bridge_slave_0 entered promiscuous mode [ 401.475617][T11389] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.482966][T11389] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.490984][T11389] device bridge_slave_1 entered promiscuous mode [ 401.971441][T11389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.984246][T11389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.008184][T11389] team0: Port device team_slave_0 added [ 402.166457][T11389] team0: Port device team_slave_1 added [ 402.210385][T11389] device hsr_slave_0 entered promiscuous mode [ 402.247671][T11389] device hsr_slave_1 entered promiscuous mode [ 402.287733][T11389] debugfs: Directory 'hsr0' with parent '/' already present! [ 402.466838][T11389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.615877][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.623586][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.633565][T11389] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.645451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.654066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.662596][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.669768][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.853066][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.870776][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.879796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.888185][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.895231][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.917971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.926478][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.926904][T11406] IPVS: ftp: loaded support on port[0] = 21 [ 402.936486][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.950315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.958958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.971450][T11389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.983009][T11389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.991242][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.001151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.171426][T11389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.383546][T11406] chnl_net:caif_netlink_parms(): no params data found [ 403.396247][ T9352] device bridge_slave_1 left promiscuous mode [ 403.403867][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.469324][ T9352] device bridge_slave_0 left promiscuous mode [ 403.475555][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:05:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:05:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:05:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023000000000000000300000058000100100001007564703a73797a304000000044000400200001000a0000000000000000000000000000000000ffffac1e000100000000200002000a800000000000f8b5eeb94dabff920469d573bd92064dbf00000000c38b5da9de421e8baeb2f384243d2c385b67c607932fbbb57f63f4166909440a2bd0b115a578e9e4cfac0af785cc40d5ee74d79a8f5aeeb89f2a0ebe4edc6f3c7705c5b4ab83d59d2fe88e54eb86f238cc117f4873a03b017ce24b2e6e7f79a0a327d15e6060304f44547c4a46a41d338802416d7d1d566d9dd5c3c2004056022f51f9"], 0x6c}}, 0x0) 18:05:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) [ 403.528505][ T9352] device bridge_slave_1 left promiscuous mode [ 403.534661][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state 18:05:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 403.588294][ T9352] device bridge_slave_0 left promiscuous mode [ 403.595862][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state 18:05:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18:05:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 408.067742][ T9352] device hsr_slave_0 left promiscuous mode [ 408.137636][ T9352] device hsr_slave_1 left promiscuous mode [ 408.208396][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 408.220043][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 408.230559][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.301180][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.371499][ T9352] bond0 (unregistering): Released all slaves [ 408.527762][ T9352] device hsr_slave_0 left promiscuous mode [ 408.577501][ T9352] device hsr_slave_1 left promiscuous mode [ 408.651639][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 408.664355][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 408.675121][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.713590][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.805248][ T9352] bond0 (unregistering): Released all slaves [ 408.896164][T11421] Enabling of bearer rejected, failed to enable media [ 409.108066][T11445] IPVS: ftp: loaded support on port[0] = 21 [ 409.114846][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.126122][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.139857][T11406] device bridge_slave_0 entered promiscuous mode [ 409.162704][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.178215][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.186069][T11406] device bridge_slave_1 entered promiscuous mode [ 409.240700][T11406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.262533][T11406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.282259][T11406] team0: Port device team_slave_0 added [ 409.289759][T11406] team0: Port device team_slave_1 added [ 409.348914][T11406] device hsr_slave_0 entered promiscuous mode [ 409.417700][T11406] device hsr_slave_1 entered promiscuous mode [ 409.467601][T11406] debugfs: Directory 'hsr0' with parent '/' already present! [ 409.519739][T11445] chnl_net:caif_netlink_parms(): no params data found [ 409.646701][T11445] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.661413][T11445] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.671667][T11445] device bridge_slave_0 entered promiscuous mode [ 409.687209][T11445] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.703449][T11445] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.711615][T11445] device bridge_slave_1 entered promiscuous mode [ 409.733122][T11445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.744710][T11445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.761799][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.768868][T11406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.776211][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.783300][T11406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.813901][T11445] team0: Port device team_slave_0 added [ 409.825420][T11445] team0: Port device team_slave_1 added [ 409.900008][T11445] device hsr_slave_0 entered promiscuous mode [ 409.944492][T11445] device hsr_slave_1 entered promiscuous mode [ 409.987469][T11445] debugfs: Directory 'hsr0' with parent '/' already present! [ 410.012365][T11445] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.019436][T11445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.026862][T11445] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.033944][T11445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.070983][T11406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.085424][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.098482][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.107896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 410.127512][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.135199][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.154796][T11406] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.168260][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.176042][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.207779][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.216352][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.225819][ T2855] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.232911][ T2855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.240819][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.249783][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.258506][ T2855] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.265559][ T2855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.273428][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.298443][T11445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.305998][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.315559][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.324715][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.334323][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.343315][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.352046][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.360778][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.372474][T11406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.384114][T11406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.413252][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.421545][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.437572][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.445841][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.461834][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.480247][T11445] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.502043][T11406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.542414][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.551860][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.561041][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.568125][ T9023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.576301][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.584933][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.593568][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.600640][ T9023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.608512][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.617048][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.637678][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.646251][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.664092][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.681635][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.690509][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.699083][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.707163][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.715608][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.725793][T11445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.736203][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.759325][T11445] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:05:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video0\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000002400)="115ca50d5c0bcf5ec95c31efd22c8f41f70f46b8b612e5a7920cc58647f71af171af976a8d2eff6aa39c49c86914d65cc2e44d64bb00ed64598885f64cf364f4be2dfcf4609add7a69ce6d81aa8d53f482e7339be29e964f5dbff40d9c6c30c7e2062875a6f552") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0xf3ffffff, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) sysinfo(&(0x7f0000000000)=""/22) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="62d06ee56a56ec8382b69aa9678aee298af3430fb4e4aa96f844d99ca16d35236b32509bec49857e4f4425f86ab814a64fbc5a5b676b023b38fed930666aa590a85a869cdca746e94a20b9bbf7c76445fe763782cc75b2267f61e297c9067e0ce55ffd48ec05dbb2715409e88f9b60b6cf1c20e9fe5cc1b72a81e2f3661a48ba9c5ccad6762cd8b4fe73a8521ca88a70252972a4fc070452b34508640928ba4580f5a0576e8c782d64ab5a95270b5bf2ee2ea38c2479eaaca5865d74c8cc35c2d42d784ade0d6329c1ca5ff12775064e32dff8e00e84813ae1e0d1", 0xdb, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x20000) socket(0xa, 0x20000000001, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002500)='/proc/capi/capi20\x00', 0x8002, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000380), 0xea) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x414010}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 18:05:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000002c0)) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r1, r0, 0x0) tkill(r2, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:05:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 411.050130][T11465] input: syz1 as /devices/virtual/input/input8 18:05:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:05:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 411.303667][T11472] input: syz1 as /devices/virtual/input/input9 18:05:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x10069) 18:05:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x8}, 0x0) 18:05:09 executing program 2: r0 = socket(0x10, 0x8000000803, 0x0) write(r0, &(0x7f0000000040)="220000002000070700be000009000701020000050000000000200000050013800100", 0x27a) 18:05:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:05:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:05:09 executing program 5: clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) 18:05:09 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)) 18:05:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 413.111568][T11515] IPVS: ftp: loaded support on port[0] = 21 [ 413.185275][T11515] chnl_net:caif_netlink_parms(): no params data found [ 413.217291][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.224573][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.232204][T11515] device bridge_slave_0 entered promiscuous mode [ 413.240852][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.248003][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.255534][T11515] device bridge_slave_1 entered promiscuous mode [ 413.273108][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.283902][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.304650][T11515] team0: Port device team_slave_0 added [ 413.311586][T11515] team0: Port device team_slave_1 added [ 413.390382][T11515] device hsr_slave_0 entered promiscuous mode [ 413.428660][T11515] device hsr_slave_1 entered promiscuous mode [ 413.467425][T11515] debugfs: Directory 'hsr0' with parent '/' already present! [ 414.022487][T11515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.292536][T11515] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.300965][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 414.311175][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.318959][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.591780][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.600777][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.611909][ T2855] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.618994][ T2855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.626642][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.635482][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.645695][ T2855] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.652794][ T2855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.660567][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 414.937707][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 414.945638][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 414.954355][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 414.963063][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 414.972478][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.980921][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.989298][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.997497][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.005538][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.013783][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.021904][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 415.034453][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.311257][T11515] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:05:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:05:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:05:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:13 executing program 5: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty=[0x0, 0x0, 0x0, 0x0, 0xe000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xa}, @remote}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 18:05:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$cec(0x0, 0x0, 0x2) 18:05:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 417.119089][T11552] input: syz1 as /devices/virtual/input/input10 [ 417.230106][T11554] input: syz1 as /devices/virtual/input/input11 18:05:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 417.507977][T11559] input: syz1 as /devices/virtual/input/input12 18:05:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 418.374372][T11565] IPVS: ftp: loaded support on port[0] = 21 [ 418.731126][ T9352] device bridge_slave_1 left promiscuous mode [ 418.737355][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.808296][ T9352] device bridge_slave_0 left promiscuous mode [ 418.814535][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.869214][ T9352] device bridge_slave_1 left promiscuous mode [ 418.875338][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.928347][ T9352] device bridge_slave_0 left promiscuous mode [ 418.934477][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.978545][ T9352] device bridge_slave_1 left promiscuous mode [ 418.984670][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.038180][ T9352] device bridge_slave_0 left promiscuous mode [ 419.044366][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.119939][ T9352] device bridge_slave_1 left promiscuous mode [ 419.126070][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.178060][ T9352] device bridge_slave_0 left promiscuous mode [ 419.184160][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.167818][ T9352] device hsr_slave_0 left promiscuous mode [ 426.207640][ T9352] device hsr_slave_1 left promiscuous mode [ 426.257108][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 426.270164][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 426.280778][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.351877][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.440232][ T9352] bond0 (unregistering): Released all slaves [ 426.598146][ T9352] device hsr_slave_0 left promiscuous mode [ 426.667404][ T9352] device hsr_slave_1 left promiscuous mode [ 426.717693][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 426.728518][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 426.740032][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.822858][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.893713][ T9352] bond0 (unregistering): Released all slaves [ 427.068193][ T9352] device hsr_slave_0 left promiscuous mode [ 427.117525][ T9352] device hsr_slave_1 left promiscuous mode [ 427.169002][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 427.182603][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 427.193084][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.254388][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.348742][ T9352] bond0 (unregistering): Released all slaves [ 427.548657][ T9352] device hsr_slave_0 left promiscuous mode [ 427.597633][ T9352] device hsr_slave_1 left promiscuous mode [ 427.667884][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 427.678807][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 427.689875][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.723441][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.833194][ T9352] bond0 (unregistering): Released all slaves [ 427.941207][T11565] chnl_net:caif_netlink_parms(): no params data found [ 427.972256][T11569] IPVS: ftp: loaded support on port[0] = 21 [ 427.981446][T11565] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.988761][T11565] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.996359][T11565] device bridge_slave_0 entered promiscuous mode [ 428.012195][T11565] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.019400][T11565] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.026932][T11565] device bridge_slave_1 entered promiscuous mode [ 428.054006][T11565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.065813][T11565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.091478][T11565] team0: Port device team_slave_0 added [ 428.109972][T11565] team0: Port device team_slave_1 added [ 428.169000][T11565] device hsr_slave_0 entered promiscuous mode [ 428.207801][T11565] device hsr_slave_1 entered promiscuous mode [ 428.305804][T11565] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.312877][T11565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.320227][T11565] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.327258][T11565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.336604][T11569] chnl_net:caif_netlink_parms(): no params data found [ 428.387915][T11569] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.395034][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.403631][T11569] device bridge_slave_0 entered promiscuous mode [ 428.413994][T11569] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.421232][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.429247][T11569] device bridge_slave_1 entered promiscuous mode [ 428.448714][T11565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.457925][T11569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.473834][T11569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.500442][T11569] team0: Port device team_slave_0 added [ 428.507748][T11569] team0: Port device team_slave_1 added [ 428.550247][T11569] device hsr_slave_0 entered promiscuous mode [ 428.587694][T11569] device hsr_slave_1 entered promiscuous mode [ 428.637599][T11569] debugfs: Directory 'hsr0' with parent '/' already present! [ 428.646158][T11565] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.652975][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.661531][T11510] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.669121][T11510] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.676935][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 428.788934][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.797240][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.804309][ T9023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.811918][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.820330][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.827387][ T9023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.955941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.964541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.973503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.982386][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.005721][T11565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.019179][T11565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.027258][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.036005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.061695][T11569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.078738][T11565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.093787][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.102102][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.120277][T11569] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.131191][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.147842][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.156227][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.163390][T11510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.181256][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.189327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.198553][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.206775][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.213844][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.223096][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.238124][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.268545][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.282696][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.328458][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.337018][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.433224][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.443244][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.457768][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.466154][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.482455][T11569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.500570][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 18:05:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:05:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 429.572384][T11579] input: syz1 as /devices/virtual/input/input13 [ 429.583491][T11569] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:05:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$cec(0x0, 0x0, 0x2) 18:05:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:05:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:05:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 430.318869][T11594] input: syz1 as /devices/virtual/input/input14 18:05:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) [ 430.633788][T11603] input: syz1 as /devices/virtual/input/input15 18:05:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) [ 430.894661][T11609] input: syz1 as /devices/virtual/input/input16 18:05:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) [ 431.241546][T11613] input: syz1 as /devices/virtual/input/input17 18:05:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:05:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:29 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) [ 432.660425][T11634] IPVS: ftp: loaded support on port[0] = 21 [ 432.730532][T11634] chnl_net:caif_netlink_parms(): no params data found [ 432.768660][T11634] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.775772][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.783894][T11634] device bridge_slave_0 entered promiscuous mode [ 432.792328][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.799683][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.808245][T11634] device bridge_slave_1 entered promiscuous mode [ 432.834272][T11634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.845776][T11634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.866561][T11634] team0: Port device team_slave_0 added [ 432.873669][T11634] team0: Port device team_slave_1 added [ 432.932205][T11634] device hsr_slave_0 entered promiscuous mode [ 432.977679][T11634] device hsr_slave_1 entered promiscuous mode [ 433.017527][T11634] debugfs: Directory 'hsr0' with parent '/' already present! [ 433.034920][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.041962][T11634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.049305][T11634] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.056333][T11634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.510709][T11634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.524183][T11637] IPVS: ftp: loaded support on port[0] = 21 [ 433.528041][T11634] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.538797][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.546824][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.554552][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.562975][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 433.781023][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.790087][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.797118][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.804681][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.813455][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.820525][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.828791][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.837051][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.846232][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.055610][T11634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.066258][T11634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.080949][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.089403][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.097989][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.106107][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.114402][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.334143][T11634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.583637][T11637] chnl_net:caif_netlink_parms(): no params data found [ 434.811737][T11637] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.818997][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.826488][T11637] device bridge_slave_0 entered promiscuous mode [ 434.835407][T11637] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.842636][T11637] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.851199][T11637] device bridge_slave_1 entered promiscuous mode [ 435.158243][T11637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.171141][T11637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.552851][T11637] team0: Port device team_slave_0 added [ 435.743712][T11637] team0: Port device team_slave_1 added [ 435.850732][T11637] device hsr_slave_0 entered promiscuous mode [ 435.887858][T11637] device hsr_slave_1 entered promiscuous mode [ 435.927521][T11637] debugfs: Directory 'hsr0' with parent '/' already present! [ 435.940542][ T9352] device bridge_slave_1 left promiscuous mode [ 435.946692][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.998798][ T9352] device bridge_slave_0 left promiscuous mode [ 436.004939][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.049305][ T9352] device bridge_slave_1 left promiscuous mode [ 436.055441][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.098157][ T9352] device bridge_slave_0 left promiscuous mode [ 436.104378][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.149230][ T9352] device bridge_slave_1 left promiscuous mode [ 436.155360][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.218063][ T9352] device bridge_slave_0 left promiscuous mode [ 436.224313][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.437849][ T9352] device hsr_slave_0 left promiscuous mode [ 441.507493][ T9352] device hsr_slave_1 left promiscuous mode [ 441.574312][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 441.587201][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 441.598591][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.630875][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.701892][ T9352] bond0 (unregistering): Released all slaves [ 441.868214][ T9352] device hsr_slave_0 left promiscuous mode [ 441.907706][ T9352] device hsr_slave_1 left promiscuous mode [ 441.985022][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 441.997080][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 442.009021][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.082104][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.168652][ T9352] bond0 (unregistering): Released all slaves [ 442.338375][ T9352] device hsr_slave_0 left promiscuous mode [ 442.407536][ T9352] device hsr_slave_1 left promiscuous mode [ 442.467548][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 442.478143][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 442.490802][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.541054][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.636633][ T9352] bond0 (unregistering): Released all slaves [ 442.773478][T11637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.787086][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.795915][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.807193][T11637] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.829688][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 442.840621][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.849014][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.856036][ T9023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.864075][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.874304][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 442.883249][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.891954][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.899045][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.918573][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 442.927148][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 442.936256][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 442.944716][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.952957][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 442.961529][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.969694][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 442.977945][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.986451][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.996982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 443.006063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.014750][T11637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 443.164251][T11637] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:05:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:05:40 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) close(r1) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 18:05:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:05:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 18:05:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:05:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:41 executing program 5: unshare(0x2000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f00000001c0)) [ 445.917698][T11703] IPVS: ftp: loaded support on port[0] = 21 [ 446.007980][T11703] chnl_net:caif_netlink_parms(): no params data found [ 446.036602][T11703] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.043834][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.051511][T11703] device bridge_slave_0 entered promiscuous mode [ 446.059482][T11703] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.066564][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.074216][T11703] device bridge_slave_1 entered promiscuous mode [ 446.089289][T11703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.100082][T11703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.116521][T11703] team0: Port device team_slave_0 added [ 446.123778][T11703] team0: Port device team_slave_1 added [ 446.180362][T11703] device hsr_slave_0 entered promiscuous mode [ 446.237747][T11703] device hsr_slave_1 entered promiscuous mode [ 446.530643][T11703] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.530949][T11706] IPVS: ftp: loaded support on port[0] = 21 [ 446.537738][T11703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.550953][T11703] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.558037][T11703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.924376][T11706] chnl_net:caif_netlink_parms(): no params data found [ 446.963946][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.971233][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.979283][T11706] device bridge_slave_0 entered promiscuous mode [ 447.119555][T11703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.126500][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.133630][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.142627][T11706] device bridge_slave_1 entered promiscuous mode [ 447.150053][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.161461][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.169726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 447.183631][T11703] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.199588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.208509][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.216097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.224835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.233461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.240533][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.390679][T11706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.403449][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.412330][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.421729][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.428809][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.436559][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.445422][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.455503][T11706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.627982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.636388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.645257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.654322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.666567][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.675733][T11706] team0: Port device team_slave_0 added [ 447.683689][T11706] team0: Port device team_slave_1 added [ 447.830352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.838973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.847023][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.855416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.864285][T11703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.940455][T11706] device hsr_slave_0 entered promiscuous mode [ 447.998652][T11706] device hsr_slave_1 entered promiscuous mode [ 448.067524][T11706] debugfs: Directory 'hsr0' with parent '/' already present! [ 448.226235][T11703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.405231][T11706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.419669][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.428955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.439007][ T9352] device bridge_slave_1 left promiscuous mode [ 448.445999][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.512937][ T9352] device bridge_slave_0 left promiscuous mode [ 448.519558][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.569778][ T9352] device bridge_slave_1 left promiscuous mode [ 448.575924][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.618505][ T9352] device bridge_slave_0 left promiscuous mode [ 448.624646][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.147742][ T9352] device hsr_slave_0 left promiscuous mode [ 452.197632][ T9352] device hsr_slave_1 left promiscuous mode [ 452.264273][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 452.277057][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 452.287965][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.331870][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.421130][ T9352] bond0 (unregistering): Released all slaves [ 452.548188][ T9352] device hsr_slave_0 left promiscuous mode [ 452.617687][ T9352] device hsr_slave_1 left promiscuous mode [ 452.666840][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 452.679764][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 452.690745][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.760770][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.853049][ T9352] bond0 (unregistering): Released all slaves [ 452.954717][T11706] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.970059][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 452.978989][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.987904][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.994967][T10543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.018930][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.026876][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.036291][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.045052][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.052156][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.062497][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.071146][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.079929][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.088466][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.096669][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.105125][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.113531][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.122070][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.130534][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.301144][T11706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.312972][T11706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 453.320916][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 453.330459][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.356250][T11706] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:05:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:05:50 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) 18:05:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$cec(0x0, 0x0, 0x2) 18:05:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) [ 453.664807][T11726] 9pnet: Insufficient options for proto=fd 18:05:50 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) 18:05:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 453.969364][T11742] 9pnet: Insufficient options for proto=fd 18:05:51 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) 18:05:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 454.185486][T11754] 9pnet: Insufficient options for proto=fd 18:05:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 455.835200][T11767] IPVS: ftp: loaded support on port[0] = 21 [ 455.895473][T11767] chnl_net:caif_netlink_parms(): no params data found [ 455.922831][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.930917][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.938852][T11767] device bridge_slave_0 entered promiscuous mode [ 455.946198][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.953331][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.960902][T11767] device bridge_slave_1 entered promiscuous mode [ 455.978538][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.990422][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.013751][T11767] team0: Port device team_slave_0 added [ 456.020947][T11767] team0: Port device team_slave_1 added [ 456.080165][T11767] device hsr_slave_0 entered promiscuous mode [ 456.120805][T11767] device hsr_slave_1 entered promiscuous mode [ 456.157634][T11767] debugfs: Directory 'hsr0' with parent '/' already present! [ 456.208660][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.224621][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.233432][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.244347][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.255097][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.264620][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.273413][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.280494][T11510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.298389][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.306168][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.314951][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.323388][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.330466][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.339265][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.347852][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.603028][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.618933][T11770] IPVS: ftp: loaded support on port[0] = 21 [ 456.625342][T11767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.635897][T11767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.651262][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.659122][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.667257][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.675645][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.684002][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 456.829170][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.029853][T11770] chnl_net:caif_netlink_parms(): no params data found 18:05:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:05:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:05:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:05:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 457.259659][T11783] 9pnet: Insufficient options for proto=fd [ 457.343752][T11770] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.352081][T11770] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.375526][T11770] device bridge_slave_0 entered promiscuous mode [ 457.563736][T11770] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.572023][T11770] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.579825][T11770] device bridge_slave_1 entered promiscuous mode [ 457.728889][T11770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.756326][T11770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.921383][T11770] team0: Port device team_slave_0 added [ 457.933594][T11770] team0: Port device team_slave_1 added [ 458.000409][T11770] device hsr_slave_0 entered promiscuous mode [ 458.037633][T11770] device hsr_slave_1 entered promiscuous mode [ 458.077628][T11770] debugfs: Directory 'hsr0' with parent '/' already present! [ 458.284898][T11770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.425701][T11770] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.434005][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.441776][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.454817][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.463557][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.471951][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.479008][T10543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.487109][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.496963][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.506173][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.515974][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.523059][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.667415][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.675898][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.684439][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.693102][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.701505][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 458.710090][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.718991][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.727103][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.735385][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.743483][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.751968][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.761038][T11770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.770635][ T9352] device bridge_slave_1 left promiscuous mode [ 458.776774][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.838363][ T9352] device bridge_slave_0 left promiscuous mode [ 458.844499][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.899083][ T9352] device bridge_slave_1 left promiscuous mode [ 458.905199][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.948471][ T9352] device bridge_slave_0 left promiscuous mode [ 458.954594][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.377929][ T9352] device hsr_slave_0 left promiscuous mode [ 462.417575][ T9352] device hsr_slave_1 left promiscuous mode [ 462.454240][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 462.466817][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 462.477996][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.504002][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.571025][ T9352] bond0 (unregistering): Released all slaves [ 462.728193][ T9352] device hsr_slave_0 left promiscuous mode [ 462.787537][ T9352] device hsr_slave_1 left promiscuous mode [ 462.857645][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 462.869278][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 462.880866][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.950839][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.051065][ T9352] bond0 (unregistering): Released all slaves [ 463.176683][T11770] 8021q: adding VLAN 0 to HW filter on device batadv0 18:06:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:06:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:06:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:00 executing program 5: socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 463.498783][T11805] 9pnet: Insufficient options for proto=fd 18:06:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 463.644432][T11811] 9pnet: Insufficient options for proto=fd 18:06:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) [ 464.457566][T11840] 9pnet: Insufficient options for proto=fd [ 465.484939][T11844] IPVS: ftp: loaded support on port[0] = 21 [ 465.611812][T11844] chnl_net:caif_netlink_parms(): no params data found [ 465.650503][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.657679][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.665257][T11844] device bridge_slave_0 entered promiscuous mode [ 465.673378][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.680731][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.688721][T11844] device bridge_slave_1 entered promiscuous mode [ 465.705849][T11844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.716081][T11844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.735239][T11844] team0: Port device team_slave_0 added [ 465.742260][T11844] team0: Port device team_slave_1 added [ 465.809542][T11844] device hsr_slave_0 entered promiscuous mode [ 465.857710][T11844] device hsr_slave_1 entered promiscuous mode [ 465.928080][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.935148][T11844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.942536][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.949615][T11844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.998346][T11844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.013383][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.022378][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.031743][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.043682][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 466.058012][T11844] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.071978][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.080959][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.088041][ T9023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.111170][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.120962][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.128065][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.136168][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.145999][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 466.156666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.171631][T11847] IPVS: ftp: loaded support on port[0] = 21 [ 466.181077][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.209331][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.222671][T11844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.515409][T11844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.563183][T11847] chnl_net:caif_netlink_parms(): no params data found [ 466.733153][T11847] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.741027][T11847] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.748691][T11847] device bridge_slave_0 entered promiscuous mode [ 466.756813][T11847] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.763981][T11847] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.774635][T11847] device bridge_slave_1 entered promiscuous mode [ 466.987222][T11847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.003466][T11847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 18:06:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:06:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) [ 467.156107][T11847] team0: Port device team_slave_0 added [ 467.171785][T11847] team0: Port device team_slave_1 added [ 468.010118][T11847] device hsr_slave_0 entered promiscuous mode [ 468.077912][T11847] device hsr_slave_1 entered promiscuous mode [ 468.117505][T11847] debugfs: Directory 'hsr0' with parent '/' already present! [ 468.449086][T11847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.459777][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.467518][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.476790][T11847] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.618842][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.627729][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.636016][ T2855] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.643079][ T2855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.651146][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.659893][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.668320][ T2855] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.675342][ T2855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.682897][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.692866][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.701910][ T9352] device bridge_slave_1 left promiscuous mode [ 468.709753][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.758312][ T9352] device bridge_slave_0 left promiscuous mode [ 468.764468][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.819329][ T9352] device bridge_slave_1 left promiscuous mode [ 468.825446][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.868345][ T9352] device bridge_slave_0 left promiscuous mode [ 468.874464][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.327843][ T9352] device hsr_slave_0 left promiscuous mode [ 472.368502][ T9352] device hsr_slave_1 left promiscuous mode [ 472.423957][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 472.437894][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 472.448794][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.515085][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.603465][ T9352] bond0 (unregistering): Released all slaves [ 472.808473][ T9352] device hsr_slave_0 left promiscuous mode [ 472.877680][ T9352] device hsr_slave_1 left promiscuous mode [ 472.926946][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 472.939792][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 472.950369][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.991279][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.078600][ T9352] bond0 (unregistering): Released all slaves [ 473.190615][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.203356][T11863] IPVS: ftp: loaded support on port[0] = 21 [ 473.210042][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.221265][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.229959][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.238569][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.246736][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.255235][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.264403][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.283249][T11847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.294880][T11847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.303913][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.312173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.356341][T11847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.427144][T11863] chnl_net:caif_netlink_parms(): no params data found [ 473.476872][T11863] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.499395][T11863] bridge0: port 1(bridge_slave_0) entered disabled state 18:06:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:10 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 18:06:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 473.527143][T11863] device bridge_slave_0 entered promiscuous mode [ 473.594395][T11875] 9pnet: Insufficient options for proto=fd 18:06:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 473.642806][T11863] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.652257][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.674051][T11863] device bridge_slave_1 entered promiscuous mode 18:06:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 473.866463][T11889] 9pnet: Insufficient options for proto=fd 18:06:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:11 executing program 5: fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x0, 0x605, &(0x7f00000000c0), 0x0}) [ 474.510109][T11863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.568794][T11863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.694244][T11863] team0: Port device team_slave_0 added [ 474.738520][T11863] team0: Port device team_slave_1 added [ 474.870175][T11863] device hsr_slave_0 entered promiscuous mode [ 474.903491][T11863] device hsr_slave_1 entered promiscuous mode [ 475.007399][T11863] debugfs: Directory 'hsr0' with parent '/' already present! [ 475.089435][T11863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.112392][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.126907][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.139641][T11863] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.151913][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.161430][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.176506][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.183608][ T9023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.207568][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.215474][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.224663][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.233451][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.240551][ T9023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.249370][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.258048][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.278325][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.286959][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.302789][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.313391][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.329866][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 475.343199][T11863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 475.362007][T11863] 8021q: adding VLAN 0 to HW filter on device batadv0 18:06:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:06:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7, 0x1800}], 0x1) [ 475.708405][T11928] 9pnet: Insufficient options for proto=fd [ 476.286222][T11937] IPVS: ftp: loaded support on port[0] = 21 [ 476.476882][T11937] chnl_net:caif_netlink_parms(): no params data found [ 476.520915][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.529764][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.538050][T11937] device bridge_slave_0 entered promiscuous mode [ 476.546221][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.553788][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.562089][T11937] device bridge_slave_1 entered promiscuous mode [ 476.585483][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.596655][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.617590][T11937] team0: Port device team_slave_0 added [ 476.624165][T11937] team0: Port device team_slave_1 added [ 476.685876][T11937] device hsr_slave_0 entered promiscuous mode [ 476.717681][T11937] device hsr_slave_1 entered promiscuous mode [ 476.767868][T11937] debugfs: Directory 'hsr0' with parent '/' already present! [ 477.189552][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.203710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.211397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.222212][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.431713][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.441074][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.454700][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.461878][T11510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.470999][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.480589][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.489327][T11510] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.496366][T11510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.504310][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 477.513835][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 477.523011][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.532023][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.540886][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 477.550858][T11510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.757201][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.765736][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 477.777688][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 477.785813][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.796567][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.805018][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.004339][T11937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 478.021157][T11941] IPVS: ftp: loaded support on port[0] = 21 [ 478.028336][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.597187][T11941] chnl_net:caif_netlink_parms(): no params data found 18:06:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:06:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07a00200000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0xfecc, 0x1c0}]) 18:06:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) [ 478.845553][T11941] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.893476][T11955] 9pnet: Insufficient options for proto=fd [ 478.900589][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.911023][T11941] device bridge_slave_0 entered promiscuous mode 18:06:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 479.075343][T11961] input: syz1 as /devices/virtual/input/input36 [ 479.116691][T11964] 9pnet: Insufficient options for proto=fd [ 479.156822][T11954] loop5: p1 p2[EZD] p3 p4 18:06:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 479.195165][T11954] loop5: p1 size 44042239 extends beyond EOD, truncated [ 479.250279][T11954] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 479.296027][T11954] loop5: p3 size 1912633224 extends beyond EOD, truncated [ 479.397936][T11971] input: syz1 as /devices/virtual/input/input37 18:06:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 479.758082][T11985] input: syz1 as /devices/virtual/input/input38 [ 480.132170][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.139558][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.147147][T11941] device bridge_slave_1 entered promiscuous mode [ 480.557651][T11941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.578928][T11941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.602812][ T9352] device bridge_slave_1 left promiscuous mode [ 480.610414][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.668159][ T9352] device bridge_slave_0 left promiscuous mode [ 480.674278][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.739287][ T9352] device bridge_slave_1 left promiscuous mode [ 480.745528][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.778753][ T9352] device bridge_slave_0 left promiscuous mode [ 480.784888][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.839300][ T9352] device bridge_slave_1 left promiscuous mode [ 480.845420][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.888567][ T9352] device bridge_slave_0 left promiscuous mode [ 480.894665][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.258175][ T9352] device hsr_slave_0 left promiscuous mode [ 486.327725][ T9352] device hsr_slave_1 left promiscuous mode [ 486.378273][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 486.389795][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 486.401661][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.445612][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.519394][ T9352] bond0 (unregistering): Released all slaves [ 486.688111][ T9352] device hsr_slave_0 left promiscuous mode [ 486.727641][ T9352] device hsr_slave_1 left promiscuous mode [ 486.777685][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 486.788859][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 486.800356][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.840700][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.913023][ T9352] bond0 (unregistering): Released all slaves [ 487.078056][ T9352] device hsr_slave_0 left promiscuous mode [ 487.127646][ T9352] device hsr_slave_1 left promiscuous mode [ 487.194403][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 487.207472][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 487.217941][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.244440][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.333947][ T9352] bond0 (unregistering): Released all slaves [ 487.443638][T11941] team0: Port device team_slave_0 added [ 487.452448][T11941] team0: Port device team_slave_1 added [ 487.472341][T11992] IPVS: ftp: loaded support on port[0] = 21 [ 487.530123][T11941] device hsr_slave_0 entered promiscuous mode [ 487.597549][T11941] device hsr_slave_1 entered promiscuous mode [ 487.732971][T11992] chnl_net:caif_netlink_parms(): no params data found [ 487.783277][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.790777][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.799055][T11992] device bridge_slave_0 entered promiscuous mode [ 487.806663][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.813823][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.821704][T11992] device bridge_slave_1 entered promiscuous mode [ 487.850902][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.863184][T11941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.878853][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.889815][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.897966][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.908089][T11941] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.921894][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.931883][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.940250][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.947264][T11939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.955123][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.971307][T11992] team0: Port device team_slave_0 added [ 487.978560][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.986982][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.995437][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.002497][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.019403][T11992] team0: Port device team_slave_1 added [ 488.031174][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.040142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.050734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.059542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.068101][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.076546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.135852][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.143933][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.152016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.281863][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.360139][T11992] device hsr_slave_0 entered promiscuous mode [ 488.399394][T11992] device hsr_slave_1 entered promiscuous mode [ 488.437478][T11992] debugfs: Directory 'hsr0' with parent '/' already present! [ 488.476144][T11941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.573527][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.593951][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.617212][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.645266][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.664830][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.680369][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.693877][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.701061][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.754619][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.774987][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.790365][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.800705][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.807782][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.815721][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.824982][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.834178][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 18:06:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07a00200000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0xfecc, 0x1c0}]) 18:06:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 488.858207][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.866706][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.938148][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.944253][T12005] 9pnet: Insufficient options for proto=fd [ 488.956312][T12004] input: syz1 as /devices/virtual/input/input39 [ 488.981443][T11992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.017750][T11992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.055705][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 489.065043][T12006] loop5: p1 p2[EZD] p3 p4 [ 489.070118][T12006] loop5: p1 size 44042239 extends beyond EOD, truncated [ 489.099209][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 489.113083][T12006] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 489.129213][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 18:06:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) [ 489.167742][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 489.183429][T12006] loop5: p3 size 1912633224 extends beyond EOD, truncated [ 489.193906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 18:06:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 489.267802][T12014] input: syz1 as /devices/virtual/input/input40 [ 489.408403][T12019] 9pnet: Insufficient options for proto=fd [ 490.123709][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.136081][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:06:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:06:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 18:06:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pipe(&(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200), 0x0) [ 490.520107][T12043] input: syz1 as /devices/virtual/input/input41 [ 490.528845][T12042] 9pnet: Insufficient options for proto=fd 18:06:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a000000000000d74619ed1307d89524429adc542c0200000014aaa7e1c7000000000000000000004270e08eba60d9a46b2225d7434d38129bbec2c232e2767345d67d010235272077700789ecba5d3fc41bcab202354a77f1eff768504b5816624a832cb8786c09fde4f0232c22fa458148e26ffe727ecc7261025313e925d358bf04257319ecdf909d391a55bb9ace4b099d341d39c372ba4b5ecd7e80b977782210cf7923e33b8ad19df455297665d71e1c1f2ab0f713d7861168d909d63ba6850d92f7"], 0x38}}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004ff7f0000000000000200000100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055338b2698ffffffff7710aa00ffe8001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 18:06:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) [ 490.789778][T12051] 9pnet: Insufficient options for proto=fd [ 490.814906][T12054] input: syz1 as /devices/virtual/input/input42 18:06:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) [ 491.084771][T12061] input: syz1 as /devices/virtual/input/input43 [ 491.476102][T12066] IPVS: ftp: loaded support on port[0] = 21 [ 491.635084][T12066] chnl_net:caif_netlink_parms(): no params data found [ 491.664010][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.671174][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.679080][T12066] device bridge_slave_0 entered promiscuous mode [ 491.686733][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.693965][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.701682][T12066] device bridge_slave_1 entered promiscuous mode [ 491.716918][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.727985][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.749034][T12066] team0: Port device team_slave_0 added [ 491.755553][T12066] team0: Port device team_slave_1 added [ 491.821747][T12066] device hsr_slave_0 entered promiscuous mode [ 491.877686][T12066] device hsr_slave_1 entered promiscuous mode [ 491.927432][T12066] debugfs: Directory 'hsr0' with parent '/' already present! [ 491.954865][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.961956][T12066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.969341][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.976389][T12066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.024218][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.039503][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.047643][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.055067][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.066536][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.081283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.089715][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.096740][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.106921][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.115492][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.122567][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.150014][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.159862][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.168683][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.176724][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.186309][T12066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.194216][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.213996][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.769621][T12078] IPVS: ftp: loaded support on port[0] = 21 18:06:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:06:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) 18:06:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:30 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a80)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='status\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4}}, 0x43) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 18:06:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) [ 492.867503][T12080] input: syz1 as /devices/virtual/input/input44 [ 492.914288][T12084] 9pnet: Insufficient options for proto=fd [ 493.674444][T12078] chnl_net:caif_netlink_parms(): no params data found [ 493.921867][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.930542][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.938452][T12078] device bridge_slave_0 entered promiscuous mode [ 493.947210][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.954819][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.962599][T12078] device bridge_slave_1 entered promiscuous mode [ 494.178162][T12078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.189221][T12078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.205896][T12078] team0: Port device team_slave_0 added [ 494.213068][T12078] team0: Port device team_slave_1 added [ 494.259122][T12078] device hsr_slave_0 entered promiscuous mode [ 494.307723][T12078] device hsr_slave_1 entered promiscuous mode [ 494.367538][T12078] debugfs: Directory 'hsr0' with parent '/' already present! [ 494.612582][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.619699][T12078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.627036][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.634149][T12078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.865796][T12093] IPVS: ftp: loaded support on port[0] = 21 [ 495.079412][T12078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.097167][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.104864][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.114330][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 495.337975][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.345704][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.586985][T12078] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.611947][T12093] chnl_net:caif_netlink_parms(): no params data found [ 495.632771][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.641251][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.649725][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.656753][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.667036][ T9352] device bridge_slave_1 left promiscuous mode [ 495.673984][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.708257][ T9352] device bridge_slave_0 left promiscuous mode [ 495.714382][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.768989][ T9352] device bridge_slave_1 left promiscuous mode [ 495.775113][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.808228][ T9352] device bridge_slave_0 left promiscuous mode [ 495.814404][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.878546][ T9352] device bridge_slave_1 left promiscuous mode [ 495.884690][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.942825][ T9352] device bridge_slave_0 left promiscuous mode [ 495.949338][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.387863][ T9352] device hsr_slave_0 left promiscuous mode [ 501.427518][ T9352] device hsr_slave_1 left promiscuous mode [ 501.478817][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 501.490980][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 501.501787][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.571456][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.664518][ T9352] bond0 (unregistering): Released all slaves [ 501.837939][ T9352] device hsr_slave_0 left promiscuous mode [ 501.887627][ T9352] device hsr_slave_1 left promiscuous mode [ 501.939239][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 501.952326][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 501.963983][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.001329][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.103680][ T9352] bond0 (unregistering): Released all slaves [ 502.248204][ T9352] device hsr_slave_0 left promiscuous mode [ 502.292062][ T9352] device hsr_slave_1 left promiscuous mode [ 502.354579][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 502.367449][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 502.378196][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.402733][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.495844][ T9352] bond0 (unregistering): Released all slaves [ 502.610454][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.623573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.632257][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.639323][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.663311][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.671932][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.680583][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.689379][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.698475][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.706773][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.715406][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.723393][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.730545][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.738439][T12093] device bridge_slave_0 entered promiscuous mode [ 502.745977][T12093] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.753315][T12093] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.761295][T12093] device bridge_slave_1 entered promiscuous mode [ 502.773863][T12078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.784579][T12078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.797252][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.805891][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.814606][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.824028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.836129][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.854861][T12093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.876341][T12093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.887688][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.905387][T12093] team0: Port device team_slave_0 added [ 502.914220][T12093] team0: Port device team_slave_1 added [ 502.979437][T12093] device hsr_slave_0 entered promiscuous mode [ 503.017608][T12093] device hsr_slave_1 entered promiscuous mode [ 503.083911][T12093] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.091101][T12093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.135049][T12093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.149746][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.158467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 503.167467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 503.175041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.185388][T12093] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.195142][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 503.204017][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.212491][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.219575][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state 18:06:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) 18:06:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) pipe(&(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200), 0x0) 18:06:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 503.356103][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 503.369178][T12107] 9pnet: Insufficient options for proto=fd [ 503.374941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.382105][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 18:06:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 503.447610][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.469933][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 18:06:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 503.554060][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 18:06:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004ff7f0000000000000200000100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055338b2698ffffffff7710aa00ffe8001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) [ 503.604722][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.637832][T12120] 9pnet: Insufficient options for proto=fd 18:06:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 503.670445][T12093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.710399][T12093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:06:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 503.746319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.808997][T12093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.847434][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 503.853225][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:06:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 503.940523][T12133] 9pnet: Insufficient options for proto=fd 18:06:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:06:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 18:06:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:06:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 504.530048][T12152] 9pnet: Insufficient options for proto=fd [ 505.643387][T12161] IPVS: ftp: loaded support on port[0] = 21 [ 505.789079][T12161] chnl_net:caif_netlink_parms(): no params data found [ 505.848990][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.856102][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.870978][T12161] device bridge_slave_0 entered promiscuous mode [ 505.883015][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.891862][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.901601][T12161] device bridge_slave_1 entered promiscuous mode [ 505.920006][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.932669][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.951625][T12161] team0: Port device team_slave_0 added [ 505.959191][T12161] team0: Port device team_slave_1 added [ 506.020491][T12161] device hsr_slave_0 entered promiscuous mode [ 506.058014][T12161] device hsr_slave_1 entered promiscuous mode [ 506.117403][T12161] debugfs: Directory 'hsr0' with parent '/' already present! [ 506.192190][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.209366][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 506.217045][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.227664][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.241456][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.251606][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.260449][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.267535][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.275260][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.285233][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.296669][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.305358][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.312469][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.329055][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.337638][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.346103][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.354863][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 506.364973][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.378091][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.390345][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.401462][T12161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.420235][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 18:06:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:06:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:44 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x401, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0xa212e6e18bdfc6, 0x20, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000002c0)={{0x1, 0x2, 0x5cad, 0x1}, 0x9, 0x80, 'id1\x00', 'timer1\x00', 0x0, 0x6141, 0x7ca3, 0x326}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x0, 0x2, 0x1, 0x2, 0x3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x8001}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) 18:06:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:06:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)) 18:06:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 507.068241][T12175] 9pnet: Insufficient options for proto=fd 18:06:44 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200), 0x0) 18:06:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:44 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty=[0x0, 0x0, 0x0, 0x0, 0xe000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800, 0x0, 0x6, 0x0, @remote={0xa}, @remote}, @tcp={{0x0, 0x0, 0x41424344, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:06:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) [ 507.779256][T12180] device lo left promiscuous mode 18:06:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:06:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 508.398184][T12209] 9pnet: Insufficient options for proto=fd [ 509.144826][T12214] IPVS: ftp: loaded support on port[0] = 21 [ 509.212554][T12214] chnl_net:caif_netlink_parms(): no params data found [ 509.374017][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.381807][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.390086][T12214] device bridge_slave_0 entered promiscuous mode [ 509.400345][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.407783][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.415295][T12214] device bridge_slave_1 entered promiscuous mode [ 509.433589][ T9352] device bridge_slave_1 left promiscuous mode [ 509.440657][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.488265][ T9352] device bridge_slave_0 left promiscuous mode [ 509.494478][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.548777][ T9352] device bridge_slave_1 left promiscuous mode [ 509.554902][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.608356][ T9352] device bridge_slave_0 left promiscuous mode [ 509.614474][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.148031][ T9352] device hsr_slave_0 left promiscuous mode [ 513.187538][ T9352] device hsr_slave_1 left promiscuous mode [ 513.277147][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 513.290904][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 513.302798][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.353841][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.442819][ T9352] bond0 (unregistering): Released all slaves [ 513.598213][ T9352] device hsr_slave_0 left promiscuous mode [ 513.667415][ T9352] device hsr_slave_1 left promiscuous mode [ 513.734532][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 513.748821][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 513.760263][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.843206][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.934165][ T9352] bond0 (unregistering): Released all slaves [ 514.054012][T12214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.064831][T12214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.085725][T12214] team0: Port device team_slave_0 added [ 514.092672][T12214] team0: Port device team_slave_1 added [ 514.150008][T12214] device hsr_slave_0 entered promiscuous mode [ 514.197667][T12214] device hsr_slave_1 entered promiscuous mode [ 514.297016][T12214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.311584][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.321722][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.332251][T12214] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.343013][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.351501][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.359892][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.366916][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.375659][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.389723][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.399039][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.407258][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.414332][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.544199][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.567940][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.590239][T12214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.600626][T12214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.623896][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.632886][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.641616][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.652133][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.668904][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 514.676546][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.688427][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0 18:06:52 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x0, [{{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @ipv4}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x440e) 18:06:52 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='grpjquota']) 18:06:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:06:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:06:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 515.111385][T12227] 9pnet: Insufficient options for proto=fd [ 515.127659][T12229] REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 515.127659][T12229] 18:06:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:06:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:52 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000002780)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) [ 515.338278][T12229] REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 515.338278][T12229] [ 515.433871][ T26] audit: type=1400 audit(1570903612.604:106): avc: denied { map } for pid=12240 comm="syz-executor.2" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=48679 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 18:06:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125d, 0x400000) 18:06:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:06:53 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:06:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='Mq\x00'/12, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:06:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) [ 516.226909][T12263] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 516.260370][T12263] ERROR: Domain ' /sbin/init /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/4' not defined. [ 517.279513][T12276] IPVS: ftp: loaded support on port[0] = 21 [ 517.344048][T12276] chnl_net:caif_netlink_parms(): no params data found [ 517.370792][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.377971][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.385461][T12276] device bridge_slave_0 entered promiscuous mode [ 517.393589][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.400724][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.408684][T12276] device bridge_slave_1 entered promiscuous mode [ 517.669071][T12276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.681015][T12276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.697063][T12276] team0: Port device team_slave_0 added [ 517.705860][T12276] team0: Port device team_slave_1 added [ 517.889522][T12276] device hsr_slave_0 entered promiscuous mode [ 517.937751][T12276] device hsr_slave_1 entered promiscuous mode [ 517.977548][T12276] debugfs: Directory 'hsr0' with parent '/' already present! [ 518.114941][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.122115][T12276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.129465][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.136489][T12276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.294484][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.305602][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.314008][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.322253][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.331517][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 518.470352][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.483298][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.491797][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.500158][T10975] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.507174][T10975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.650257][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.662036][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.670595][T10975] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.677702][T10975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.818551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 518.827010][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 518.835802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 518.844438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 518.853594][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 518.994479][T12276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.005244][T12276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.017081][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.025511][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.034394][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 519.043586][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.051993][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.060349][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.068864][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.213152][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.244646][ T9352] device bridge_slave_1 left promiscuous mode [ 519.251584][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.279660][ T9352] device bridge_slave_0 left promiscuous mode [ 519.285782][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.328897][ T9352] device bridge_slave_1 left promiscuous mode [ 519.335000][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.388353][ T9352] device bridge_slave_0 left promiscuous mode [ 519.394478][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.797830][ T9352] device hsr_slave_0 left promiscuous mode [ 522.887634][ T9352] device hsr_slave_1 left promiscuous mode [ 522.964769][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 522.976897][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 522.988814][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.081399][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.153781][ T9352] bond0 (unregistering): Released all slaves [ 523.317757][ T9352] device hsr_slave_0 left promiscuous mode [ 523.377414][ T9352] device hsr_slave_1 left promiscuous mode [ 523.438171][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 523.449837][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 523.461024][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.542782][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.633763][ T9352] bond0 (unregistering): Released all slaves 18:07:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:07:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:01 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100), 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) 18:07:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @dev}], 0x20) 18:07:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:01 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) listen(r0, 0x0) socket$inet6(0xa, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) close(r1) 18:07:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:07:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 526.030402][T12327] IPVS: ftp: loaded support on port[0] = 21 [ 526.095649][T12327] chnl_net:caif_netlink_parms(): no params data found [ 526.124396][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.131538][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.139227][T12327] device bridge_slave_0 entered promiscuous mode [ 526.147131][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.154342][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.162094][T12327] device bridge_slave_1 entered promiscuous mode [ 526.306295][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.318228][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.400871][T12327] team0: Port device team_slave_0 added [ 526.408824][T12327] team0: Port device team_slave_1 added [ 526.459025][T12327] device hsr_slave_0 entered promiscuous mode [ 526.497706][T12327] device hsr_slave_1 entered promiscuous mode [ 526.619009][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.626179][T12327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.633517][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.640596][T12327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.749562][T12327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.761133][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.769707][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.777207][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.785963][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 526.868740][T12327] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.878959][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.887342][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.894364][ T9027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.905536][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.914341][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.921421][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.008824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 527.017148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 527.027881][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 527.110464][T12327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 527.122035][T12327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.134442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.143322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.215071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 527.234425][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.347996][ T9352] device bridge_slave_1 left promiscuous mode [ 527.354174][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.419934][ T9352] device bridge_slave_0 left promiscuous mode [ 527.426219][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.197964][ T9352] device hsr_slave_0 left promiscuous mode [ 529.267414][ T9352] device hsr_slave_1 left promiscuous mode [ 529.326714][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 529.339804][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 529.350434][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.404023][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.493205][ T9352] bond0 (unregistering): Released all slaves 18:07:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='Mq\x00'/12, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:07:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmget(0x3, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) 18:07:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:07:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="f73c906d6b66732e666174000204010002000270fff8f8c6", 0x18}], 0x0, 0x0) 18:07:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 531.124713][T12358] FAT-fs (loop2): count of clusters too big (13039614) [ 531.157510][T12358] FAT-fs (loop2): Can't find a valid FAT filesystem 18:07:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 531.246119][T12358] FAT-fs (loop2): count of clusters too big (13039614) [ 531.282347][T12358] FAT-fs (loop2): Can't find a valid FAT filesystem 18:07:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) listen(r2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:08 executing program 2: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) epoll_pwait(r1, &(0x7f0000000340)=[{}], 0x1, 0x0, &(0x7f0000000380), 0x8) 18:07:08 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000700)={@dev, @random="2d900300", [{[], {0x8100, 0x5, 0x0, 0x3}}], {@generic={0x0, "4eb6f94f7f0f18ef6885a5e94476d0bf7d8978d803a3b6ca8472aa46af76"}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 533.212720][T12400] IPVS: ftp: loaded support on port[0] = 21 [ 533.222445][ T9352] device bridge_slave_1 left promiscuous mode [ 533.228880][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.288115][ T9352] device bridge_slave_0 left promiscuous mode [ 533.294316][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.017970][ T9352] device hsr_slave_0 left promiscuous mode [ 535.077596][ T9352] device hsr_slave_1 left promiscuous mode [ 535.154338][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 535.167178][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 535.178840][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.270916][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.341459][ T9352] bond0 (unregistering): Released all slaves [ 535.497268][T12402] IPVS: ftp: loaded support on port[0] = 21 [ 535.563318][T12400] chnl_net:caif_netlink_parms(): no params data found [ 535.703387][T12400] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.711309][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.719467][T12400] device bridge_slave_0 entered promiscuous mode [ 535.732323][T12402] chnl_net:caif_netlink_parms(): no params data found [ 535.741929][T12400] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.749206][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.757132][T12400] device bridge_slave_1 entered promiscuous mode [ 535.812630][T12400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.834828][T12400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.850263][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.860639][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.871228][T12402] device bridge_slave_0 entered promiscuous mode [ 535.897165][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.911673][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.921870][T12402] device bridge_slave_1 entered promiscuous mode [ 535.933971][T12400] team0: Port device team_slave_0 added [ 535.943762][T12400] team0: Port device team_slave_1 added [ 535.976520][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.994755][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.034374][T12402] team0: Port device team_slave_0 added [ 536.110087][T12400] device hsr_slave_0 entered promiscuous mode [ 536.197808][T12400] device hsr_slave_1 entered promiscuous mode [ 536.317256][T12400] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.324368][T12400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.331729][T12400] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.338805][T12400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.354640][T12402] team0: Port device team_slave_1 added [ 536.439060][T12402] device hsr_slave_0 entered promiscuous mode [ 536.487573][T12402] device hsr_slave_1 entered promiscuous mode [ 536.537465][T12402] debugfs: Directory 'hsr0' with parent '/' already present! [ 536.556287][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.563365][T12402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.570707][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.577783][T12402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.588063][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.595631][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.607143][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.615832][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.676002][T12400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.725659][T12402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.745101][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.754429][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.771633][T12400] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.793795][T12402] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.805984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.814331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.838077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 536.846875][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 536.855974][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.863058][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.870932][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 536.881502][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 536.889972][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.896992][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.904555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 536.913337][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 536.921674][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.928760][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.936220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 536.945138][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 536.953640][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 536.962044][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 536.970418][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.980319][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.003932][T12400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 537.017451][T12400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.032362][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.041981][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.050620][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.059533][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.066662][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.074311][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.083084][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.091840][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.100408][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.109063][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 537.117817][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.126109][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.134653][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.143080][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 537.151533][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.160245][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.168967][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 537.185692][T12402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 537.196138][T12402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.212242][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.227914][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.236329][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 537.245173][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.270549][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 537.286367][T12402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.299556][T12400] 8021q: adding VLAN 0 to HW filter on device batadv0 18:07:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:07:14 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) lseek(r0, 0x0, 0x4) 18:07:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000700)={@dev, @random="2d900300", [{[], {0x8100, 0x5, 0x0, 0x3}}], {@generic={0x0, "4eb6f94f7f0f18ef6885a5e94476d0bf7d8978d803a3b6ca8472aa46af76"}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:07:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 537.577915][ T26] audit: type=1400 audit(1570903634.754:107): avc: denied { watch } for pid=12419 comm="syz-executor.5" path="/" dev="sda1" ino=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir permissive=1 18:07:14 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) lseek(r0, 0x0, 0x4) 18:07:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 537.678703][T12426] 9pnet: Could not find request transport: fd0x0000000000000003 18:07:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) 18:07:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:15 executing program 5: 18:07:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:07:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:15 executing program 5: 18:07:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000700)={@dev, @random="2d900300", [{[], {0x8100, 0x5, 0x0, 0x3}}], {@generic={0x0, "4eb6f94f7f0f18ef6885a5e94476d0bf7d8978d803a3b6ca8472aa46af76"}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:07:15 executing program 5: 18:07:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 538.730075][T12460] 9pnet: Could not find request transport: fd0x0000000000000003 18:07:15 executing program 5: 18:07:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:16 executing program 5: 18:07:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:16 executing program 5: 18:07:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:16 executing program 2: 18:07:16 executing program 5: 18:07:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 539.431499][T12488] 9pnet: Could not find request transport: fd0x0000000000000003 [ 540.588540][ T9393] device bridge_slave_1 left promiscuous mode [ 540.594699][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.648362][ T9393] device bridge_slave_0 left promiscuous mode [ 540.654546][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.358676][ T0] NOHZ: local_softirq_pending 08 [ 542.438051][ T9393] device hsr_slave_0 left promiscuous mode [ 542.497557][ T9393] device hsr_slave_1 left promiscuous mode [ 542.547746][ T9393] team0 (unregistering): Port device team_slave_1 removed [ 542.559185][ T9393] team0 (unregistering): Port device team_slave_0 removed [ 542.570196][ T9393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.641375][ T9393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.728897][ T9393] bond0 (unregistering): Released all slaves [ 542.857581][T12497] IPVS: ftp: loaded support on port[0] = 21 [ 542.859192][T12499] IPVS: ftp: loaded support on port[0] = 21 [ 543.021650][T12499] chnl_net:caif_netlink_parms(): no params data found [ 543.033184][T12497] chnl_net:caif_netlink_parms(): no params data found [ 543.125647][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.139913][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.151960][T12499] device bridge_slave_0 entered promiscuous mode [ 543.182461][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.194052][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.204940][T12499] device bridge_slave_1 entered promiscuous mode [ 543.216142][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.226439][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.241538][T12497] device bridge_slave_0 entered promiscuous mode [ 543.271065][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.282556][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.294729][T12497] device bridge_slave_1 entered promiscuous mode [ 543.307809][T12499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.319881][T12499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.354782][T12499] team0: Port device team_slave_0 added [ 543.362668][T12497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.373229][T12499] team0: Port device team_slave_1 added [ 543.380868][T12497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.500097][T12499] device hsr_slave_0 entered promiscuous mode [ 543.537725][T12499] device hsr_slave_1 entered promiscuous mode [ 543.583460][T12497] team0: Port device team_slave_0 added [ 543.597174][T12497] team0: Port device team_slave_1 added [ 543.626762][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.633837][T12499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.641196][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.648275][T12499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.770455][T12497] device hsr_slave_0 entered promiscuous mode [ 543.817683][T12497] device hsr_slave_1 entered promiscuous mode [ 543.857508][T12497] debugfs: Directory 'hsr0' with parent '/' already present! [ 543.892615][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.899722][T12497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.907044][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.914161][T12497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.933088][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.942013][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.950401][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.958301][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.992297][T12499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.020974][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 544.034779][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.048579][T12499] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.073387][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 544.092999][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.101684][T10975] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.108769][T10975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.134550][T12497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.142385][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 544.151556][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 544.160292][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.167383][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.179100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 544.208729][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 544.218078][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 544.226912][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 544.235942][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 544.246708][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 544.255701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 544.263957][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.272534][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 544.286952][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.294321][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 544.302324][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.310246][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.318681][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.328209][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.346897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 544.355402][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.363812][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.370884][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.379495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 544.387969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 544.396199][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.403261][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.419176][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 544.428564][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 544.443040][T12499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.458226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 544.466637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 544.475504][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 544.485554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 544.503260][T12497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.514526][T12497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.527790][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 544.535608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 544.553457][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.563087][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.571620][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.581003][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.605774][T12497] 8021q: adding VLAN 0 to HW filter on device batadv0 18:07:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:07:22 executing program 2: 18:07:22 executing program 5: 18:07:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:22 executing program 5: 18:07:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:22 executing program 2: [ 544.929494][T12520] 9pnet: Insufficient options for proto=fd 18:07:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, "66821220275eee678afb50622f632c972901b18e8140060e4ddd5d350e99eb4c7eca6e9f0dcddb1418a3056c302cd35630f079811b5f2855bdcfcc49819f16d9", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef7e2171ce5376814d9e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc"}) 18:07:22 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x365, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) socket$unix(0x1, 0x800000000005, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:07:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:23 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) 18:07:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:23 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$void(r0, 0x5450) 18:07:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 545.910330][T12546] 9pnet: Insufficient options for proto=fd 18:07:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:07:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:23 executing program 5: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1, 0x0) preadv(r1, &(0x7f00000013c0), 0x1e3, 0x0) 18:07:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 546.305775][T12561] 9pnet: Insufficient options for proto=fd 18:07:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 548.071905][T12584] IPVS: ftp: loaded support on port[0] = 21 [ 548.136960][T12584] chnl_net:caif_netlink_parms(): no params data found [ 548.146256][ T9352] device bridge_slave_1 left promiscuous mode [ 548.153145][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.198261][ T9352] device bridge_slave_0 left promiscuous mode [ 548.204407][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.037807][ T9352] device hsr_slave_0 left promiscuous mode [ 550.087968][ T9352] device hsr_slave_1 left promiscuous mode [ 550.145594][ T9352] team0 (unregistering): Port device team_slave_1 removed [ 550.159167][ T9352] team0 (unregistering): Port device team_slave_0 removed [ 550.169900][ T9352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.221645][ T9352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.313534][ T9352] bond0 (unregistering): Released all slaves [ 550.413544][T12587] IPVS: ftp: loaded support on port[0] = 21 [ 550.461244][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.468569][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.476104][T12584] device bridge_slave_0 entered promiscuous mode [ 550.486361][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.493499][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.501503][T12584] device bridge_slave_1 entered promiscuous mode [ 550.523425][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.535904][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.691319][T12584] team0: Port device team_slave_0 added [ 550.704482][T12587] chnl_net:caif_netlink_parms(): no params data found [ 550.715815][T12584] team0: Port device team_slave_1 added [ 550.800120][T12584] device hsr_slave_0 entered promiscuous mode [ 550.837688][T12584] device hsr_slave_1 entered promiscuous mode [ 550.887492][T12584] debugfs: Directory 'hsr0' with parent '/' already present! [ 550.901392][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.917527][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.925410][T12587] device bridge_slave_0 entered promiscuous mode [ 550.950791][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.958125][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.966117][T12587] device bridge_slave_1 entered promiscuous mode [ 550.978026][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.985094][T12584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.992463][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.999539][T12584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.031444][T12587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.054311][T12587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.092448][T12587] team0: Port device team_slave_0 added [ 551.108549][T12587] team0: Port device team_slave_1 added [ 551.129002][T12584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.157940][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.167262][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.175646][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.184419][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 551.300364][T12587] device hsr_slave_0 entered promiscuous mode [ 551.367764][T12587] device hsr_slave_1 entered promiscuous mode [ 551.438767][T12587] debugfs: Directory 'hsr0' with parent '/' already present! [ 551.447840][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.483003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.495226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.512843][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.519913][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.538370][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.546920][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.555368][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.562408][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.570881][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.579309][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.600500][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.609765][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.618476][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.626834][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.635557][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.643958][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.652323][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.660479][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.670761][T12584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.688238][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.714259][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.747179][T12587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.773582][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.782029][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.794059][T12587] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.804918][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.814441][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.823458][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.830557][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.849561][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.858436][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.867007][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.876566][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.883656][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.895585][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.903995][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.926491][T12587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.937549][T12587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.949449][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.958766][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.967235][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.976712][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.994253][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 552.012477][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.023514][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 552.049051][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.094608][T12587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.110508][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 552.123531][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:07:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 552.274883][T12605] 9pnet: Insufficient options for proto=fd 18:07:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 18:07:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) [ 552.644470][T12613] 9pnet: Insufficient options for proto=fd 18:07:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) listen(r0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:07:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) listen(r0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) listen(r0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 554.841803][T12632] IPVS: ftp: loaded support on port[0] = 21 [ 555.380293][T12632] chnl_net:caif_netlink_parms(): no params data found [ 555.381685][T12635] IPVS: ftp: loaded support on port[0] = 21 [ 555.641682][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.649352][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.656878][T12632] device bridge_slave_0 entered promiscuous mode [ 555.666742][T12632] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.673976][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.681745][T12632] device bridge_slave_1 entered promiscuous mode [ 555.904842][T12632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.916804][T12632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.150156][T12632] team0: Port device team_slave_0 added [ 556.157069][T12632] team0: Port device team_slave_1 added [ 556.459120][T12632] device hsr_slave_0 entered promiscuous mode [ 556.527797][T12632] device hsr_slave_1 entered promiscuous mode [ 556.597520][T12632] debugfs: Directory 'hsr0' with parent '/' already present! [ 556.612241][T12635] chnl_net:caif_netlink_parms(): no params data found [ 556.624792][ T9399] device bridge_slave_1 left promiscuous mode [ 556.631169][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.678306][ T9399] device bridge_slave_0 left promiscuous mode [ 556.684444][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.738508][ T9399] device bridge_slave_1 left promiscuous mode [ 556.744623][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.798370][ T9399] device bridge_slave_0 left promiscuous mode [ 556.804547][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.839235][ T9399] device bridge_slave_1 left promiscuous mode [ 556.845405][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.888680][ T9399] device bridge_slave_0 left promiscuous mode [ 556.894894][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.427789][ T9399] device hsr_slave_0 left promiscuous mode [ 562.487675][ T9399] device hsr_slave_1 left promiscuous mode [ 562.534761][ T9399] team0 (unregistering): Port device team_slave_1 removed [ 562.549926][ T9399] team0 (unregistering): Port device team_slave_0 removed [ 562.562570][ T9399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.631448][ T9399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.731453][ T9399] bond0 (unregistering): Released all slaves [ 562.888903][ T9399] device hsr_slave_0 left promiscuous mode [ 562.937535][ T9399] device hsr_slave_1 left promiscuous mode [ 563.009713][ T9399] team0 (unregistering): Port device team_slave_1 removed [ 563.022605][ T9399] team0 (unregistering): Port device team_slave_0 removed [ 563.033734][ T9399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.081769][ T9399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.176277][ T9399] bond0 (unregistering): Released all slaves [ 563.328816][ T9399] device hsr_slave_0 left promiscuous mode [ 563.378126][ T9399] device hsr_slave_1 left promiscuous mode [ 563.454975][ T9399] team0 (unregistering): Port device team_slave_1 removed [ 563.467658][ T9399] team0 (unregistering): Port device team_slave_0 removed [ 563.480337][ T9399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.524630][ T9399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.614684][ T9399] bond0 (unregistering): Released all slaves [ 563.712589][T12635] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.719868][T12635] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.727472][T12635] device bridge_slave_0 entered promiscuous mode [ 563.742246][T12635] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.749387][T12635] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.756881][T12635] device bridge_slave_1 entered promiscuous mode [ 563.776874][T12635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.788081][T12635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.812214][T12635] team0: Port device team_slave_0 added [ 563.829248][T12635] team0: Port device team_slave_1 added [ 563.879245][T12635] device hsr_slave_0 entered promiscuous mode [ 563.937695][T12635] device hsr_slave_1 entered promiscuous mode [ 564.000158][T12632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.016178][T12632] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.028793][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.036978][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.047897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.048369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.065575][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.072678][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.088235][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 564.095967][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.104692][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.113109][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.120167][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.152272][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 564.162272][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 564.171357][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 564.181545][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 564.190261][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 564.200115][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 564.208784][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 564.216922][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 564.226044][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 564.237096][T12632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.249265][T12632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 564.260578][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 564.269456][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 564.285039][T12632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.439915][T12635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.453957][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.462231][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 564.473265][T12635] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.485554][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.515985][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.523091][T10543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.545546][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:07:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 564.567542][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.575982][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.583086][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state 18:07:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 564.653126][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 564.662901][T12647] 9pnet: Insufficient options for proto=fd [ 564.691500][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 564.726159][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 564.763646][T12635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.802219][T12635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.843527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 564.882391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 564.909937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 564.955903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 564.988752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.025991][T12635] 8021q: adding VLAN 0 to HW filter on device batadv0 18:07:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:07:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 565.542053][T12669] 9pnet: bogus RWRITE count (2 > 1) 18:07:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) 18:07:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) [ 565.993566][T12683] 9pnet: bogus RWRITE count (2 > 1) [ 566.793896][T12687] IPVS: ftp: loaded support on port[0] = 21 [ 566.881191][T12687] chnl_net:caif_netlink_parms(): no params data found [ 566.919172][T12687] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.926293][T12687] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.934423][T12687] device bridge_slave_0 entered promiscuous mode [ 566.943632][T12687] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.950908][T12687] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.960538][T12687] device bridge_slave_1 entered promiscuous mode [ 566.982746][T12687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.994840][T12687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.019404][T12687] team0: Port device team_slave_0 added [ 567.026634][T12687] team0: Port device team_slave_1 added [ 567.080173][T12687] device hsr_slave_0 entered promiscuous mode [ 567.127723][T12687] device hsr_slave_1 entered promiscuous mode [ 567.167445][T12687] debugfs: Directory 'hsr0' with parent '/' already present! [ 567.196901][T12687] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.203997][T12687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.211393][T12687] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.218477][T12687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.304163][T12687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.333271][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 567.345424][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.363443][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.386679][T12687] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.401390][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 567.410500][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 567.419258][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.426284][T11939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.439508][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 567.448301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 567.456593][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.463667][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.471497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 567.484664][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 567.498033][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 567.506421][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 567.516276][T11939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 567.525712][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 567.534816][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 567.552117][T12687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 567.562858][T12687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.575176][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 567.583616][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 567.591909][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.601642][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.609995][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.632629][T12687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.737262][T12693] IPVS: ftp: loaded support on port[0] = 21 [ 567.892407][T12693] chnl_net:caif_netlink_parms(): no params data found [ 567.945949][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.953404][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.961527][T12693] device bridge_slave_0 entered promiscuous mode [ 567.969458][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.976514][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.984231][T12693] device bridge_slave_1 entered promiscuous mode [ 568.001721][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.012727][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.752775][T12693] team0: Port device team_slave_0 added [ 568.776659][T12693] team0: Port device team_slave_1 added [ 569.130987][T12693] device hsr_slave_0 entered promiscuous mode [ 569.178174][T12693] device hsr_slave_1 entered promiscuous mode [ 569.217518][T12693] debugfs: Directory 'hsr0' with parent '/' already present! [ 569.812771][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.824028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 569.832927][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 569.843990][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.125971][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 570.135002][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.143540][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.150660][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.159025][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 570.167655][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.175889][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.182983][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.192461][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.205322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.498136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.506678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.515281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.524094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.533654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.542064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.550438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.560587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 570.568270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 570.576403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.858208][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 570.880033][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 18:07:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r6, r5) 18:07:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) 18:07:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) 18:07:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0}, 0x20) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000004c0)={{0x7fff, 0x9, 0x0, 0x100, 0x401, 0x3ff}, 0x0, 0x4, 0x5, 0x3, 0x0, "65d15942ce6ad32c70646c452e7b397e9c71847aca0966ad184cd3d9576306f1b443f1f0385f0a6de4e7b51aa30fb05f261beb71eb2400e4a0ef81416f0c52bcff1b2faac7df28c6cb35036e2d7ef0410207487adf965d50a798a979e1ec34e333775fd2fae8b322d2d874898219de469ed4584052a2f0778113e8c3da9c33da"}) readlink(0x0, 0x0, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="10320300000000000000ccb3a40a6c0408e0bc1eed8ee4178feca6584b0a302625d1a84ab7f3d0223172f087aa52555e2eff070000ec86abfe80233a10c0d3d34739e925192ed1c01dd5d8fbbe36ce90a51ec0e046cdb1c712485877b2357c78"], 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 571.622783][ T9399] device bridge_slave_1 left promiscuous mode [ 571.637519][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state 18:07:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8df5666a99b3db14f450e4db180000000000000004000001000000", @ANYRES64], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:07:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 18:07:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) [ 571.688663][ T9399] device bridge_slave_0 left promiscuous mode [ 571.694854][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.704359][T12710] 9pnet: bogus RWRITE count (2 > 1) [ 571.777624][ T9399] batman_adv: batadv0: Interface deactivated: veth0_to_bridge [ 571.785233][ T9399] batman_adv: batadv0: Removing interface: veth0_to_bridge [ 571.824053][ T9399] batman_adv: batadv0: Removing interface: bond_slave_1 [ 571.882324][ T21] kasan: CONFIG_KASAN_INLINE enabled 18:07:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) [ 571.908660][ T21] kasan: GPF could be caused by NULL-ptr deref or user memory access 18:07:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(r1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 571.960987][ T21] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 571.967961][ T21] CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.4.0-rc2+ #0 [ 571.975398][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.979753][T12724] kobject: '9p-39' (00000000c350c22e): kobject_add_internal: parent: 'bdi', set: 'devices' [ 571.985613][ T21] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 572.003467][ T21] RIP: 0010:batadv_iv_ogm_queue_add+0x49/0x1120 [ 572.009707][ T21] Code: 48 89 75 b8 48 89 4d c0 4c 89 45 b0 44 89 4d d0 e8 4c d3 4c fa 48 8d 7b 03 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 18 0d 00 00 [ 572.029295][ T21] RSP: 0018:ffff8880a9a6fb80 EFLAGS: 00010246 [ 572.035372][ T21] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88809e293000 [ 572.036332][T12724] kobject: '9p-39' (00000000c350c22e): kobject_uevent_env [ 572.043341][ T21] RDX: 0000000000000000 RSI: ffffffff87263eb4 RDI: 0000000000000003 [ 572.043349][ T21] RBP: ffff8880a9a6fc18 R08: ffff88809e293000 R09: 0000000000000001 [ 572.043356][ T21] R10: ffffed100bacf16f R11: ffff88805d678b7f R12: ffff88805d678b7c [ 572.043363][ T21] R13: 00000001000069ac R14: ffff88809e293000 R15: 0000000100006a12 [ 572.043373][ T21] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 572.043380][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.043385][ T21] CR2: 00007fe4740a2000 CR3: 000000009a20f000 CR4: 00000000001426f0 [ 572.043395][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.043401][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 572.043405][ T21] Call Trace: [ 572.043423][ T21] ? lock_downgrade+0x920/0x920 [ 572.043438][ T21] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 572.043451][ T21] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 572.043466][ T21] batadv_iv_ogm_schedule+0x783/0xe50 [ 572.043482][ T21] batadv_iv_send_outstanding_bat_ogm_packet+0x580/0x760 [ 572.043496][ T21] ? rcu_read_lock_any_held.part.0+0x50/0x50 18:07:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) [ 572.043504][ T21] ? trace_hardirqs_on+0x67/0x240 [ 572.043519][ T21] process_one_work+0x9af/0x1740 [ 572.043537][ T21] ? pwq_dec_nr_in_flight+0x320/0x320 [ 572.091759][T12724] kobject: '9p-39' (00000000c350c22e): fill_kobj_path: path = '/devices/virtual/bdi/9p-39' [ 572.097911][ T21] ? lock_acquire+0x190/0x410 [ 572.097931][ T21] worker_thread+0x98/0xe40 [ 572.097954][ T21] kthread+0x361/0x430 [ 572.131299][ T3891] kobject: 'loop0' (00000000b151aee9): kobject_uevent_env [ 572.136221][ T21] ? process_one_work+0x1740/0x1740 [ 572.177518][ T3891] kobject: 'loop0' (00000000b151aee9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 572.185951][ T21] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 572.185968][ T21] ret_from_fork+0x24/0x30 [ 572.185979][ T21] Modules linked in: [ 572.236843][ T9013] kobject: '9p-39' (00000000c350c22e): kobject_uevent_env [ 572.248856][ T9013] kobject: '9p-39' (00000000c350c22e): fill_kobj_path: path = '/devices/virtual/bdi/9p-39' [ 572.281561][ T9013] kobject: '9p-39' (00000000c350c22e): kobject_cleanup, parent 0000000053b3850f [ 572.301201][ T9013] kobject: '9p-39' (00000000c350c22e): calling ktype release [ 572.325057][ T3891] kobject: 'loop2' (000000005bbd73e0): kobject_uevent_env [ 572.337435][ T9013] kobject: '9p-39': free name [ 572.341090][ T3891] kobject: 'loop2' (000000005bbd73e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 572.368625][ T3891] kobject: 'loop0' (00000000b151aee9): kobject_uevent_env [ 572.375751][ T3891] kobject: 'loop0' (00000000b151aee9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 572.419184][ T21] ---[ end trace 6acfaff35c8210fe ]--- [ 572.425968][ T21] RIP: 0010:batadv_iv_ogm_queue_add+0x49/0x1120 [ 572.447475][ T21] Code: 48 89 75 b8 48 89 4d c0 4c 89 45 b0 44 89 4d d0 e8 4c d3 4c fa 48 8d 7b 03 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 18 0d 00 00 [ 572.492406][ T21] RSP: 0018:ffff8880a9a6fb80 EFLAGS: 00010246 [ 572.517474][T12735] kobject: '9p-40' (000000006db35390): kobject_add_internal: parent: 'bdi', set: 'devices' [ 572.527507][ T21] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88809e293000 [ 572.535467][ T21] RDX: 0000000000000000 RSI: ffffffff87263eb4 RDI: 0000000000000003 [ 572.547548][T12735] kobject: '9p-40' (000000006db35390): kobject_uevent_env [ 572.564943][T12735] kobject: '9p-40' (000000006db35390): fill_kobj_path: path = '/devices/virtual/bdi/9p-40' [ 572.567342][ T21] RBP: ffff8880a9a6fc18 R08: ffff88809e293000 R09: 0000000000000001 [ 572.593299][T12735] 9pnet: bogus RWRITE count (2 > 1) [ 572.597355][ T21] R10: ffffed100bacf16f R11: ffff88805d678b7f R12: ffff88805d678b7c [ 572.606508][ T21] R13: 00000001000069ac R14: ffff88809e293000 R15: 0000000100006a12 [ 572.630791][ T21] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 572.650465][ T9013] kobject: '9p-40' (000000006db35390): kobject_uevent_env [ 572.657604][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.674298][ T21] CR2: 0000001b2f028000 CR3: 000000006c214000 CR4: 00000000001426f0 [ 572.677393][ T9013] kobject: '9p-40' (000000006db35390): fill_kobj_path: path = '/devices/virtual/bdi/9p-40' [ 572.684385][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.693983][ T9013] kobject: '9p-40' (000000006db35390): kobject_cleanup, parent 0000000053b3850f [ 572.709279][ T9013] kobject: '9p-40' (000000006db35390): calling ktype release [ 572.716639][ T9013] kobject: '9p-40': free name [ 572.720484][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 572.729320][ T21] Kernel panic - not syncing: Fatal exception [ 572.736597][ T21] Kernel Offset: disabled [ 572.740912][ T21] Rebooting in 86400 seconds..