[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts.
2020/03/27 04:08:03 fuzzer started
2020/03/27 04:08:06 dialing manager at 10.128.0.26:33655
2020/03/27 04:08:06 syscalls: 3028
2020/03/27 04:08:06 code coverage: enabled
2020/03/27 04:08:06 comparison tracing: enabled
2020/03/27 04:08:06 extra coverage: enabled
2020/03/27 04:08:06 setuid sandbox: enabled
2020/03/27 04:08:06 namespace sandbox: enabled
2020/03/27 04:08:06 Android sandbox: /sys/fs/selinux/policy does not exist
2020/03/27 04:08:06 fault injection: enabled
2020/03/27 04:08:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/03/27 04:08:06 net packet injection: enabled
2020/03/27 04:08:06 net device setup: enabled
2020/03/27 04:08:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/03/27 04:08:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
04:09:21 executing program 0:
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80)
socket$inet_udplite(0x2, 0x2, 0x88)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="870cb0e145b4f4ad65c2d3ca3c2c2af3b25d04d3c63700c038404e2032d33bbb24f711ab06fcea5653628192fb278b2fae55c2b187f80519528e00f519f334bc5127bedd930a02f10faa2799d07386bab2acfd7f63e83a76cee5b7631b3004ed4da72ded8a9db2c205f2f771727327fe4f154f9399cf509738c7b6b29914bb76db383bb30576addc908042f4aa85dd406f3c9b73d8085ad2c27ce610a802327a00b07f595c5ad423e82238d269dbcabe3c4f3d555a33d5daa14eaa414142696e6f05c5106fdf68edfef96af8af14"])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf595, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

syzkaller login: [  121.974977][ T7025] IPVS: ftp: loaded support on port[0] = 21
04:09:21 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000050700000000000000000000004c", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012000c000100626f6e64000000001c00020008000100040000000a001a00e000000108000b007a3e82b655d3d284394a31f7a4c4fe0bfbfcd9a63c7509da20a944fd6b2bf6e286ef7fec73a79bb03dc7eb37d4bde1c92947390ef118a3ca8982434b6f70bb", @ANYRES32=0x0, @ANYBLOB="d3fb85d01437388265a5f9b7c813c6994a8a121f8a7cf61c51f70a16c7f504b63008b76d9409"], 0x4c}}, 0x0)

[  122.167276][ T7025] chnl_net:caif_netlink_parms(): no params data found
[  122.315108][ T7025] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.326700][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.335008][ T7025] device bridge_slave_0 entered promiscuous mode
[  122.357861][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.365029][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.373759][ T7145] IPVS: ftp: loaded support on port[0] = 21
[  122.380700][ T7025] device bridge_slave_1 entered promiscuous mode
[  122.402283][ T7025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.415348][ T7025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.449844][ T7025] team0: Port device team_slave_0 added
04:09:21 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x44040)

[  122.462541][ T7025] team0: Port device team_slave_1 added
[  122.516967][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.523973][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.586017][ T7025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.616434][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.623444][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.654804][ T7201] IPVS: ftp: loaded support on port[0] = 21
[  122.676123][ T7025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
04:09:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1}, {0x3f000000}}}, 0xb8}, 0x1, 0xfffff000}, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)

[  122.828938][ T7025] device hsr_slave_0 entered promiscuous mode
[  122.847061][ T7025] device hsr_slave_1 entered promiscuous mode
04:09:22 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x20020009)

[  122.963301][ T7274] IPVS: ftp: loaded support on port[0] = 21
[  122.998161][ T7145] chnl_net:caif_netlink_parms(): no params data found
[  123.267763][ T7429] IPVS: ftp: loaded support on port[0] = 21
[  123.277811][ T7201] chnl_net:caif_netlink_parms(): no params data found
[  123.308553][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.315666][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.326498][ T7145] device bridge_slave_0 entered promiscuous mode
[  123.382482][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.391892][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.404606][ T7145] device bridge_slave_1 entered promiscuous mode
04:09:23 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x200, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)=0x4, 0x4)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="29450b2005f75bf0953d1b2745552c7d5db5ec61ce6f7d32e1bdec5b0254c18d5324467587ed648c6adc530810c51a71", @ANYRESOCT, @ANYBLOB, @ANYRESDEC])
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r2 = msgget$private(0x0, 0x50)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/190)

[  123.519139][ T7274] chnl_net:caif_netlink_parms(): no params data found
[  123.583797][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.607714][ T7025] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  123.671289][ T7025] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  123.717602][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.724687][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.733248][ T7201] device bridge_slave_0 entered promiscuous mode
[  123.745181][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.752376][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.761028][ T7201] device bridge_slave_1 entered promiscuous mode
[  123.769461][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.793471][ T7145] team0: Port device team_slave_0 added
[  123.800954][ T7025] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  123.849134][ T7025] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  123.918821][ T7145] team0: Port device team_slave_1 added
[  123.978731][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.993337][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.995877][ T7627] IPVS: ftp: loaded support on port[0] = 21
[  124.027550][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.034633][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.043020][ T7274] device bridge_slave_0 entered promiscuous mode
[  124.052437][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.060571][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.068624][ T7274] device bridge_slave_1 entered promiscuous mode
[  124.076044][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.083051][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.109492][ T7145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.135913][ T7201] team0: Port device team_slave_0 added
[  124.170371][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.177792][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.204674][ T7145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.228775][ T7201] team0: Port device team_slave_1 added
[  124.254409][ T7274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.272442][ T7274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.318288][ T7429] chnl_net:caif_netlink_parms(): no params data found
[  124.334863][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.342853][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.370147][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.423043][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.430927][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.458748][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.497736][ T7145] device hsr_slave_0 entered promiscuous mode
[  124.546182][ T7145] device hsr_slave_1 entered promiscuous mode
[  124.575787][ T7145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.583511][ T7145] Cannot create hsr debugfs directory
[  124.619438][ T7274] team0: Port device team_slave_0 added
[  124.662794][ T7274] team0: Port device team_slave_1 added
[  124.683724][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.692933][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.702359][ T7429] device bridge_slave_0 entered promiscuous mode
[  124.712934][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.721908][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.730397][ T7429] device bridge_slave_1 entered promiscuous mode
[  124.748373][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.848690][ T7201] device hsr_slave_0 entered promiscuous mode
[  124.887658][ T7201] device hsr_slave_1 entered promiscuous mode
[  124.926137][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.933719][ T7201] Cannot create hsr debugfs directory
[  124.948448][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.955420][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.982452][ T7274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.996299][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.003251][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.029951][ T7274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.063081][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.103791][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  125.114614][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.124553][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.156538][ T7627] chnl_net:caif_netlink_parms(): no params data found
[  125.230822][ T7274] device hsr_slave_0 entered promiscuous mode
[  125.276014][ T7274] device hsr_slave_1 entered promiscuous mode
[  125.315654][ T7274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.323297][ T7274] Cannot create hsr debugfs directory
[  125.331075][ T7025] 8021q: adding VLAN 0 to HW filter on device team0
[  125.398409][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.408541][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.417803][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.425009][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.462257][ T7429] team0: Port device team_slave_0 added
[  125.489482][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  125.499526][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.508936][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.518323][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.525380][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.533981][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  125.576357][ T7429] team0: Port device team_slave_1 added
[  125.620771][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  125.631890][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.640538][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.648762][ T7627] device bridge_slave_0 entered promiscuous mode
[  125.659597][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.667430][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.675240][ T7627] device bridge_slave_1 entered promiscuous mode
[  125.712076][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  125.722048][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  125.733581][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.741394][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.768291][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.782966][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.790076][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.816760][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.841545][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.851991][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  125.864605][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  125.874088][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  125.892355][ T7145] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  125.969084][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.995015][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  126.003966][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.014260][ T7145] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  126.069719][ T7145] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  126.120302][ T7145] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  126.238959][ T7429] device hsr_slave_0 entered promiscuous mode
[  126.275988][ T7429] device hsr_slave_1 entered promiscuous mode
[  126.315568][ T7429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.323154][ T7429] Cannot create hsr debugfs directory
[  126.358067][ T7627] team0: Port device team_slave_0 added
[  126.377895][ T7627] team0: Port device team_slave_1 added
[  126.388744][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  126.398763][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  126.411123][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  126.435499][ T7201] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  126.540529][ T7201] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  126.611209][ T7201] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  126.670225][ T7201] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  126.737239][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.744205][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.771284][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.806786][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.813774][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.841369][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.863108][ T7274] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  126.944731][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  126.952421][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  126.967837][ T7274] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  127.047631][ T7627] device hsr_slave_0 entered promiscuous mode
[  127.085781][ T7627] device hsr_slave_1 entered promiscuous mode
[  127.125677][ T7627] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.133302][ T7627] Cannot create hsr debugfs directory
[  127.147732][ T7274] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  127.187274][ T7025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.213632][ T7274] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  127.339025][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.350477][ T7429] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.398868][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  127.407514][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.440193][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.458094][ T7429] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  127.517705][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  127.525910][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.534418][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.544652][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.568252][ T7429] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  127.608697][ T7429] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.671082][ T7025] device veth0_vlan entered promiscuous mode
[  127.680232][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.688105][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.699411][ T7145] 8021q: adding VLAN 0 to HW filter on device team0
[  127.730077][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.738150][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.764983][ T7627] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  127.799463][ T7627] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  127.849878][ T7025] device veth1_vlan entered promiscuous mode
[  127.862687][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  127.872382][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  127.881518][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.890476][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.897658][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.907097][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.919716][ T7201] 8021q: adding VLAN 0 to HW filter on device team0
[  127.928085][ T7627] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  127.978132][ T7627] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  128.038477][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.047704][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.057191][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.064247][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.086804][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  128.096389][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.115238][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.123785][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.132818][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.139958][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.148460][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.157584][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.166684][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.173750][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.182211][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.191997][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.234961][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.244890][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.254480][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.264910][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.273842][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.282661][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.291478][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.300457][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.309135][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.318189][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.327212][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.335200][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.352749][ T7145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.363438][ T7145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.393236][ T7201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.405135][ T7201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.418722][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.430047][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.439404][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.450755][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.459488][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.470675][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.479874][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.488414][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.497879][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.505991][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.522932][ T7025] device veth0_macvtap entered promiscuous mode
[  128.546036][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.554638][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  128.564485][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.579967][ T7025] device veth1_macvtap entered promiscuous mode
[  128.605434][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  128.613458][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  128.623674][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.631743][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.650788][ T7274] 8021q: adding VLAN 0 to HW filter on device team0
[  128.670379][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  128.679065][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  128.687193][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  128.694745][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  128.706558][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.724322][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.742873][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.765326][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.773975][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.783199][ T2796] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.790361][ T2796] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.799267][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.808773][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  128.818025][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.827279][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.836448][ T2796] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.843548][ T2796] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.851860][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  128.861255][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  128.871118][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.896879][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.915593][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.924207][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  128.936587][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.948041][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.957614][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.966946][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  129.001876][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  129.009919][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  129.019045][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  129.029898][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  129.038945][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.048051][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  129.056866][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.075240][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  129.083935][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.106714][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.164474][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.175791][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.194449][ T7145] device veth0_vlan entered promiscuous mode
[  129.365748][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.374157][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.391591][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.401839][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.411969][ T8283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  129.427026][ T7201] device veth0_vlan entered promiscuous mode
[  129.453576][ T7145] device veth1_vlan entered promiscuous mode
[  129.479274][ T7429] 8021q: adding VLAN 0 to HW filter on device team0
[  129.501810][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  129.518520][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.535396][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.551502][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.559946][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.572503][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  129.580788][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  129.594638][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0
04:09:29 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3800)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
getpid()
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})

[  129.626745][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.634538][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.649212][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  129.662708][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  129.676933][ T7627] 8021q: adding VLAN 0 to HW filter on device team0
[  129.699063][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  129.714190][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
04:09:29 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0x11c, 0x11c, 0x11c, 0x0, 0x0, 0x1b4, 0x1b4, 0x1b4, 0x1b4, 0x1b4, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0xfffffffe, 0x0, 0xffffffff, 'ip6tnl0\x00', 'vlan0\x00'}, 0x0, 0xc0, 0x11c, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @random="b28303f42fa2"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4)

[  129.723469][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.730630][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.753701][ T7145] device veth0_macvtap entered promiscuous mode
04:09:29 executing program 0:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x20031ec0}], 0x1, 0x0)
dup2(r0, r1)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = gettid()
tkill(r4, 0x1000000000016)

[  129.782129][ T7201] device veth1_vlan entered promiscuous mode
[  129.821185][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  129.829784][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.839136][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.852976][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  129.865521][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  129.874083][ T2796] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.881250][ T2796] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.895188][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  129.903931][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  129.914297][ T2796] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.921434][ T2796] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.929569][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  129.939172][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  129.947447][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  129.958197][ T7145] device veth1_macvtap entered promiscuous mode
[  129.973231][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  129.981543][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  129.991069][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.000735][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.008001][ T8042] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.016095][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.033347][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.042420][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.051370][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.106591][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.122382][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.131635][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.143246][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.152180][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.164205][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.173161][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.186529][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.194288][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.206361][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  130.217091][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.229751][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.251768][ T7429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.263696][ T7429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.282077][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.291576][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.301131][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.311363][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.321946][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.330975][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.340142][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.349371][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.363619][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  130.377207][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.389270][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.416100][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  130.425914][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.434645][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.445034][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  130.452503][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
04:09:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@numtail='nonumtail=0'}]})

[  130.473233][ T7201] device veth0_macvtap entered promiscuous mode
[  130.503601][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.512576][ T7274] device veth0_vlan entered promiscuous mode
[  130.528125][ T7627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.540390][ T7627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.562489][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  130.574590][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.595655][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.604255][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.614647][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  130.623941][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  130.633518][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.642816][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.650506][ T8317] FAT-fs (loop0): bogus number of reserved sectors
[  130.651358][ T8317] FAT-fs (loop0): Can't find a valid FAT filesystem
[  130.669803][ T7201] device veth1_macvtap entered promiscuous mode
04:09:30 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
fcntl$setstatus(r0, 0x4, 0x2000)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

[  130.705175][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.712876][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  130.726976][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  130.743846][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.793205][ T7274] device veth1_vlan entered promiscuous mode
[  130.819842][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  130.842547][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.870137][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  130.882194][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.894338][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.904316][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  130.913575][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  130.923315][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.935046][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.961226][ T7627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.964735][    C0] hrtimer: interrupt took 45981 ns
[  131.097694][ T7429] device veth0_vlan entered promiscuous mode
[  131.122279][ T7429] device veth1_vlan entered promiscuous mode
[  131.168108][ T7429] device veth0_macvtap entered promiscuous mode
[  131.183593][ T7429] device veth1_macvtap entered promiscuous mode
[  131.221070][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.234365][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.252143][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.269841][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.283158][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.300299][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.313727][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.335999][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  131.349747][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.368448][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  131.409510][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.422454][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1
04:09:30 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
fcntl$setstatus(r0, 0x4, 0x2000)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

[  131.613539][ T7274] device veth0_macvtap entered promiscuous mode
[  131.695062][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  131.710758][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.738222][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  131.771584][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.799903][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  131.830359][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  131.858227][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  131.878503][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.891649][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  131.902989][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.921148][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.934313][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.949763][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.960992][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  131.970950][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.980843][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  131.990805][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  132.025292][ T7274] device veth1_macvtap entered promiscuous mode
[  132.045768][ T8345] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  132.060822][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.120780][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  132.141677][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.159319][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  132.171913][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.187889][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  132.201351][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.220529][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.326843][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.342735][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.350951][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  132.366434][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
04:09:31 executing program 0:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x20000054)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x2, 0x3, 0x310, 0x150, 0x0, 0x0, 0x0, 0x0, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xe8, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)

[  132.380884][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  132.390475][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  132.406754][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
04:09:31 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
fcntl$setstatus(r1, 0x4, 0x2000)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

[  132.438446][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  132.454114][ T7627] device veth0_vlan entered promiscuous mode
[  132.466093][ T8381] xt_nfacct: accounting object `syz0' does not exists
[  132.551438][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
04:09:32 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000000000c0002000800010004000000f293b1f6ef59ed5c26845620d363b9bd1ca296c5ec09bf9c53374ce7c2bec128f6880766a781b7d853b9ebeb313acb15ace50c0b73db0bc941804eb14518c36313e396e9927ba0b89421ec59aaf25e12261abe52dca25634bc42a7b40866debe41cdca73c05918cc311a0d1d972fdb06d30e9fc11418e0ecb9c8ee651960ffd9acdaa4bc4ef90b2dc0b05b13a3c29a3d"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3, @ANYBLOB="443c3d7c834cfa9d683826e7673405fcda4522e51baaeb8b90a6f914cd"], 0x50}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}, 0x1, 0x8000000ffffff9e}, 0x0)

[  132.609559][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.931777][ T7627] device veth1_vlan entered promiscuous mode
[  133.015981][ T8396] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  133.072405][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.100115][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.122836][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.154583][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.165927][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.191710][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.207479][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.219985][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.232899][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.248740][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  133.259078][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  133.273624][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  133.286781][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.297627][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  133.308120][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.318134][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  133.330004][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.339935][ T7274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  133.350617][ T7274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.365008][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.375438][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  133.384883][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  133.456737][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  133.465947][ T3445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  133.525034][ T8401] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  133.547485][ T8401] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.567345][ T7627] device veth0_macvtap entered promiscuous mode
[  133.578777][ T7627] device veth1_macvtap entered promiscuous mode
[  133.644263][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.675338][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.694528][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.731519][ T8458] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'.
[  133.742095][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.762305][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.773689][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
04:09:33 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="00bb14f4ecb3", 0x0, 0x0, 0x0, 0x0, 0x0})
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6)
read(r0, 0x0, 0x7ffffffff000)

04:09:33 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58)

[  133.785821][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.814491][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.829427][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  133.858895][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.897261][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.933489][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  133.944962][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.956059][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  133.968447][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.979073][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  133.989882][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.000363][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  134.011414][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.021344][ T7627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  134.031834][ T7627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.043312][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.054948][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  134.062951][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  134.072840][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  134.094830][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  134.106679][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  134.115815][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
04:09:34 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000021e4055f"], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:09:34 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
fcntl$setstatus(r1, 0x4, 0x2000)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

04:09:34 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000040)="30f3", 0x2, r1)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3)
r3 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040))

04:09:34 executing program 2:
dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424650f01c8b8dd000f00d80f21f30f01c3ddc3", 0x7b}], 0x1, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="12f68946d73e62c846")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/15, 0xf}], 0x1)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x2c, @empty, 0x4e22, 0x2, 'lc\x00', 0x2, 0x752b}, 0x2c)

04:09:34 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="00bb14f4ecb3", 0x0, 0x0, 0x0, 0x0, 0x0})
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6)
read(r0, 0x0, 0x7ffffffff000)

04:09:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0x11c, 0x11c, 0x11c, 0x0, 0x0, 0x1b4, 0x1b4, 0x1b4, 0x1b4, 0x1b4, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0xffffffff, 'ip6tnl0\x00', 'vlan0\x00'}, 0x0, 0xc0, 0x11c, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @random="b28303f42fa2"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4)

04:09:34 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:34 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:34 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[  134.741757][ T8517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
04:09:34 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:34 executing program 2:
dup(0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424650f01c8b8dd000f00d80f21f30f01c3ddc3", 0x7b}], 0x1, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="12f68946d73e62c846")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/15, 0xf}], 0x1)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x2c, @empty, 0x4e22, 0x2, 'lc\x00', 0x2, 0x752b}, 0x2c)

04:09:34 executing program 0:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:34 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000021e4055f"], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:09:35 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000040)="30f3", 0x2, r0)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="3121bdd89dccaa898cd167678d1c70e2f16685f8542f4d80cd523c4710376298c4ecc8ffafcf0917201ace8e203c868cba2e437ddc993b3715fb378a7fc32a9b3bc614971b970769166a7005d69690edf31429073ad2ed9b030f949948ff767d65", 0x61, r0)
r1 = socket(0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000200)='/@$\x00')

04:09:35 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000040)="30f3", 0x2, r1)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3)
r3 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040))

04:09:35 executing program 0:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:35 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="e5c40000d5bf000000"], 0x9)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r3, 0x107, 0x8, &(0x7f00000001c0)="a2e6999b", 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@ll, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

04:09:35 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = epoll_create1(0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)
r3 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x2, r3, &(0x7f0000000040))
keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000200)='/@$\x00')

04:09:35 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000021e4055f"], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:09:35 executing program 0:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:35 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000040)="30f3", 0x2, r0)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="3121bdd89dccaa898cd167678d1c70e2f16685f8542f4d80cd523c4710376298c4ecc8ffafcf0917201ace8e203c868cba2e437ddc993b3715fb378a7fc32a9b3bc614971b970769166a7005d69690edf31429073ad2ed9b030f949948ff767d65", 0x61, r0)
r1 = socket(0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000200)='/@$\x00')

04:09:35 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000040)="30f3", 0x2, r1)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3)
r3 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040))

04:09:35 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040))
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

04:09:35 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000021e4055f"], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:09:35 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = epoll_create1(0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)
r3 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x2, r3, &(0x7f0000000040))
keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000200)='/@$\x00')

04:09:35 executing program 0:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:35 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

04:09:35 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone(0x4d80c480, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, 0x0)
socket(0x200000000000011, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0)
read$eventfd(r1, 0x0, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000380))
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000ed44000000f803c22000000001000000000000007fffff4da88cb11f5a5b930000000000030000000000000008000000000000000700000000000000e700"])
bind(0xffffffffffffffff, 0x0, 0x0)

04:09:35 executing program 0:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:35 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000021e4055f"], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)

04:09:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

04:09:35 executing program 2:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x400086)

04:09:35 executing program 0:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:35 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040))
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

[  136.066839][ T8616] ptrace attach of "/root/syz-executor.1"[8614] was attempted by "/root/syz-executor.1"[8616]
[  136.209077][ T8627] IPVS: ftp: loaded support on port[0] = 21
04:09:35 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[  136.263117][ T8614] IPVS: ftp: loaded support on port[0] = 21
04:09:35 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040))
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

04:09:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

04:09:35 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:36 executing program 3:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040))
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

[  136.676377][ T6746] tipc: TX() has been purged, node left!
04:09:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'user.', 'user.syz\x00'}, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

04:09:39 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

04:09:39 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040))
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

04:09:39 executing program 2:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x400086)

04:09:39 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000021e4055f"], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4)

04:09:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'user.', 'user.syz\x00'}, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

04:09:39 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7, 0x22, 0x0, &(0x7f00000002c0)="5c710957ca9f13550b2ac06c0800a221865734734188a8914b41147948e3d14625a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[  140.061924][ T8734] kvm [8730]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000005
[  140.097158][ T8741] kvm [8735]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000005
[  140.105572][ T8734] kvm [8730]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000058
[  140.128207][ T8734] kvm [8730]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000002d
[  140.140041][ T8741] kvm [8735]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000058
04:09:39 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000301e})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040))
read$eventfd(0xffffffffffffffff, 0x0, 0x0)

[  140.172165][ T8734] kvm [8730]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000068
[  140.182448][ T8741] kvm [8735]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000002d
[  140.216682][ T8734] kvm [8730]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000032
[  140.229288][ T8741] kvm [8735]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000068
[  140.252501][ T8734] BUG: kernel NULL pointer dereference, address: 0000000000000086
[  140.260357][ T8734] #PF: supervisor instruction fetch in kernel mode
[  140.266861][ T8734] #PF: error_code(0x0010) - not-present page
[  140.272873][ T8734] PGD 98fbc067 P4D 98fbc067 PUD 9f876067 PMD 0 
[  140.279127][ T8734] Oops: 0010 [#1] PREEMPT SMP KASAN
[  140.284333][ T8734] CPU: 0 PID: 8734 Comm: syz-executor.3 Not tainted 5.6.0-rc7-syzkaller #0
[  140.292917][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  140.303128][ T8734] RIP: 0010:0x86
[  140.306686][ T8734] Code: Bad RIP value.
[  140.310762][ T8734] RSP: 0018:ffffc900041df998 EFLAGS: 00010086
[  140.316833][ T8734] RAX: ffffc900041df9c8 RBX: fffffe0000000000 RCX: 0000000000040000
[  140.324807][ T8734] RDX: ffffc9000fac4000 RSI: 000000000002f6d0 RDI: 000000000002f6d1
[  140.332783][ T8734] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca
[  140.340765][ T8734] R10: ffff888048fdc180 R11: 0000000000000002 R12: dffffc0000000000
[  140.348886][ T8734] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb
[  140.356867][ T8734] FS:  00007eff6f4ac700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  140.365801][ T8734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.372390][ T8734] CR2: 000000000000005c CR3: 00000000a79c9000 CR4: 00000000001426f0
[  140.380369][ T8734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  140.388346][ T8734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  140.396320][ T8734] Call Trace:
[  140.399620][ T8734]  ? handle_external_interrupt_irqoff+0x154/0x280
[  140.406047][ T8734]  ? handle_external_interrupt_irqoff+0x132/0x280
[  140.412579][ T8734]  ? __irqentry_text_start+0x8/0x8
[  140.417724][ T8734]  ? vcpu_enter_guest+0x6c77/0x9290
[  140.423050][ T8734]  ? __kasan_slab_free+0x1ac/0x1e0
[  140.428169][ T8734]  ? __kasan_slab_free+0x12e/0x1e0
[  140.433286][ T8734]  ? kfree+0x10a/0x220
[  140.437365][ T8734]  ? tomoyo_path_number_perm+0x525/0x690
[  140.443013][ T8734]  ? security_file_ioctl+0x55/0xb0
[  140.448135][ T8734]  ? __se_sys_ioctl+0x48/0x160
[  140.452907][ T8734]  ? do_syscall_64+0xf3/0x1b0
[  140.457595][ T8734]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  140.463666][ T8734]  ? format_decode+0x466/0x1ce0
[  140.468533][ T8734]  ? __lock_acquire+0xc5a/0x1bc0
[  140.473502][ T8734]  ? mark_lock+0x107/0x1650
[  140.478018][ T8734]  ? lock_acquire+0x154/0x250
[  140.482700][ T8734]  ? rcu_lock_acquire+0x9/0x30
[  140.487615][ T8734]  ? kvm_check_async_pf_completion+0x34e/0x360
[  140.493793][ T8734]  ? vcpu_run+0x3a3/0xd50
[  140.498174][ T8734]  ? kvm_arch_vcpu_ioctl_run+0x419/0x880
[  140.503815][ T8734]  ? kvm_vcpu_ioctl+0x67c/0xa80
[  140.508681][ T8734]  ? kvm_vm_release+0x50/0x50
[  140.513342][ T8734]  ? __se_sys_ioctl+0xf9/0x160
[  140.518112][ T8734]  ? do_syscall_64+0xf3/0x1b0
[  140.522814][ T8734]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  140.528882][ T8734] Modules linked in:
[  140.532778][ T8734] CR2: 0000000000000086
[  140.536948][ T8734] ---[ end trace d529559679120329 ]---
[  140.542521][ T8734] RIP: 0010:0x86
[  140.546086][ T8734] Code: Bad RIP value.
[  140.550132][ T8734] RSP: 0018:ffffc900041df998 EFLAGS: 00010086
[  140.556188][ T8734] RAX: ffffc900041df9c8 RBX: fffffe0000000000 RCX: 0000000000040000
[  140.564147][ T8734] RDX: ffffc9000fac4000 RSI: 000000000002f6d0 RDI: 000000000002f6d1
[  140.572107][ T8734] RBP: 0000000000000ec0 R08: ffffffff8398c3c3 R09: ffffffff811c7eca
[  140.580058][ T8734] R10: ffff888048fdc180 R11: 0000000000000002 R12: dffffc0000000000
[  140.588038][ T8734] R13: fffffe0000000ec8 R14: ffffffff880016f0 R15: fffffe0000000ecb
[  140.596016][ T8734] FS:  00007eff6f4ac700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  140.604939][ T8734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.611514][ T8734] CR2: 000000000000005c CR3: 00000000a79c9000 CR4: 00000000001426f0
[  140.619486][ T8734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  140.627458][ T8734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  140.635421][ T8734] Kernel panic - not syncing: Fatal exception
[  140.643135][ T8734] Kernel Offset: disabled
[  140.647530][ T8734] Rebooting in 86400 seconds..