Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. 2020/02/05 21:59:41 fuzzer started 2020/02/05 21:59:43 dialing manager at 10.128.0.26:35493 2020/02/05 21:59:43 syscalls: 2939 2020/02/05 21:59:43 code coverage: enabled 2020/02/05 21:59:43 comparison tracing: enabled 2020/02/05 21:59:43 extra coverage: enabled 2020/02/05 21:59:43 setuid sandbox: enabled 2020/02/05 21:59:43 namespace sandbox: enabled 2020/02/05 21:59:43 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/05 21:59:43 fault injection: enabled 2020/02/05 21:59:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/05 21:59:43 net packet injection: enabled 2020/02/05 21:59:43 net device setup: enabled 2020/02/05 21:59:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/05 21:59:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 22:02:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 22:02:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x8003, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = open(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = open(0x0, 0x141042, 0x0) creat(0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(0x0, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) r5 = creat(0x0, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x10, 0x8003, 0x8020001) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) fdatasync(r8) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r9, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) syzkaller login: [ 290.167799][ T9813] IPVS: ftp: loaded support on port[0] = 21 [ 290.371983][ T9813] chnl_net:caif_netlink_parms(): no params data found 22:02:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, 0x0, 0x18) [ 290.419029][ T9816] IPVS: ftp: loaded support on port[0] = 21 [ 290.573455][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.586334][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.611833][ T9813] device bridge_slave_0 entered promiscuous mode [ 290.640839][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.648248][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.657509][ T9813] device bridge_slave_1 entered promiscuous mode [ 290.688549][ T9820] IPVS: ftp: loaded support on port[0] = 21 [ 290.713116][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.763551][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 22:02:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f00000000c0), 0x4) [ 290.823089][ T9816] chnl_net:caif_netlink_parms(): no params data found [ 290.839571][ T9813] team0: Port device team_slave_0 added [ 290.872795][ T9813] team0: Port device team_slave_1 added [ 290.984984][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.992487][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.019898][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.058872][ T9825] IPVS: ftp: loaded support on port[0] = 21 [ 291.080944][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.087941][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.122108][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.162974][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.170179][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.180657][ T9816] device bridge_slave_0 entered promiscuous mode [ 291.197215][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.204440][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state 22:02:45 executing program 4: open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) timer_create(0x8, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) open(0x0, 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) r0 = creat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r0}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x0, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) r5 = creat(0x0, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 291.215613][ T9816] device bridge_slave_1 entered promiscuous mode [ 291.223261][ T9820] chnl_net:caif_netlink_parms(): no params data found [ 291.313860][ T9813] device hsr_slave_0 entered promiscuous mode [ 291.370941][ T9813] device hsr_slave_1 entered promiscuous mode [ 291.455941][ T9828] IPVS: ftp: loaded support on port[0] = 21 [ 291.468754][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.487843][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 22:02:45 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x7}, {0x6}]}, 0x10) [ 291.571351][ T9816] team0: Port device team_slave_0 added [ 291.579886][ T9816] team0: Port device team_slave_1 added [ 291.696381][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.706592][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.715982][ T9820] device bridge_slave_0 entered promiscuous mode [ 291.732445][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.739554][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.748240][ T9820] device bridge_slave_1 entered promiscuous mode [ 291.756349][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.763578][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.790379][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.831111][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.838326][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.864932][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.919723][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.931423][ T9832] IPVS: ftp: loaded support on port[0] = 21 [ 291.968547][ T9825] chnl_net:caif_netlink_parms(): no params data found [ 291.985768][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.052561][ T9816] device hsr_slave_0 entered promiscuous mode [ 292.090888][ T9816] device hsr_slave_1 entered promiscuous mode [ 292.130711][ T9816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.141313][ T9816] Cannot create hsr debugfs directory [ 292.233398][ T9820] team0: Port device team_slave_0 added [ 292.267817][ T9820] team0: Port device team_slave_1 added [ 292.285777][ T9813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.346348][ T9813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.418250][ T9813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.481121][ T9828] chnl_net:caif_netlink_parms(): no params data found [ 292.505805][ T9813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.588692][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.596990][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.606355][ T9825] device bridge_slave_0 entered promiscuous mode [ 292.618926][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.626709][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.635111][ T9825] device bridge_slave_1 entered promiscuous mode [ 292.645537][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.652948][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.679773][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.702356][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.709474][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.741055][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.809245][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.852310][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.932772][ T9820] device hsr_slave_0 entered promiscuous mode [ 292.981031][ T9820] device hsr_slave_1 entered promiscuous mode [ 293.020784][ T9820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.028784][ T9820] Cannot create hsr debugfs directory [ 293.049119][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.056669][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.064850][ T9828] device bridge_slave_0 entered promiscuous mode [ 293.073717][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.080907][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.089157][ T9828] device bridge_slave_1 entered promiscuous mode [ 293.098869][ T9825] team0: Port device team_slave_0 added [ 293.137137][ T9828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.149702][ T9825] team0: Port device team_slave_1 added [ 293.175495][ T9828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.199175][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.206502][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.234431][ T9825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.294969][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.302167][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.329842][ T9825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.365353][ T9832] chnl_net:caif_netlink_parms(): no params data found [ 293.398691][ T9828] team0: Port device team_slave_0 added [ 293.411766][ T9828] team0: Port device team_slave_1 added [ 293.441236][ T9816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.533014][ T9825] device hsr_slave_0 entered promiscuous mode [ 293.571992][ T9825] device hsr_slave_1 entered promiscuous mode [ 293.620839][ T9825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.628615][ T9825] Cannot create hsr debugfs directory [ 293.635219][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.642402][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.669005][ T9828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.682937][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.689933][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.716454][ T9828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.736202][ T9816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.838251][ T9816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.872825][ T9816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.004052][ T9828] device hsr_slave_0 entered promiscuous mode [ 294.060932][ T9828] device hsr_slave_1 entered promiscuous mode [ 294.130746][ T9828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.138584][ T9828] Cannot create hsr debugfs directory [ 294.163876][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.272306][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.283206][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.293654][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.301328][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.309236][ T9832] device bridge_slave_0 entered promiscuous mode [ 294.318114][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.325290][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.333267][ T9832] device bridge_slave_1 entered promiscuous mode [ 294.369150][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.407656][ T9820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.463821][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.473480][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.482897][ T3238] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.490716][ T3238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.499077][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.508843][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.517477][ T3238] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.524552][ T3238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.564113][ T9820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.614265][ T9820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.673739][ T9832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.683357][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.697350][ T9832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.732179][ T9820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.805139][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.828059][ T9832] team0: Port device team_slave_0 added [ 294.838688][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.856811][ T9832] team0: Port device team_slave_1 added [ 294.878821][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.886861][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.914572][ T9832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.929464][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.939277][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.947765][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.961126][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.969892][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.988044][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.995410][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.024957][ T9832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.103947][ T9832] device hsr_slave_0 entered promiscuous mode [ 295.140870][ T9832] device hsr_slave_1 entered promiscuous mode [ 295.190665][ T9832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.198291][ T9832] Cannot create hsr debugfs directory [ 295.227475][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.236539][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.248739][ T9825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.323270][ T9825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.379184][ T9828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.455712][ T9825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.506450][ T9825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.566090][ T9813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.580408][ T9813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.593672][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.602268][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.610835][ T9828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.653664][ T9828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.757325][ T9828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.829242][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.838270][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.871899][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.882160][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.940956][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.950114][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.973507][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.021402][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.030088][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.040810][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.084103][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.094669][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.108519][ T2707] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.117467][ T2707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.126953][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.136168][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.146635][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.173903][ T9820] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.198898][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.208045][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.217697][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.228055][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.236734][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.244384][ T2713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.255356][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.265949][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.275067][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.286522][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.317112][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.327969][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.336660][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.346922][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.357314][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.381044][ T9813] device veth0_vlan entered promiscuous mode [ 296.388009][ T9832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.456290][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.477990][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.487288][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.496725][ T2741] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.504329][ T2741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.516427][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.525894][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.537476][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.544964][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.553025][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.562040][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.571276][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.579746][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.588616][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.597365][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.608754][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.617255][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.627714][ T9832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.686009][ T9825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.719226][ T9832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.773687][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.785632][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.794504][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.804020][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.812788][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.821379][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.839871][ T9825] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.855298][ T9813] device veth1_vlan entered promiscuous mode [ 296.863373][ T9832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 296.908596][ T9828] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.915989][ T9820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.927494][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.935783][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.944369][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.952822][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.960399][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.968757][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.977100][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.985313][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.031336][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.040175][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.049274][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.056379][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.064558][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.074479][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.083402][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.090685][ T2713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.098669][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.107859][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.116543][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.126682][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.134096][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.170163][ T9813] device veth0_macvtap entered promiscuous mode [ 297.184533][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.193556][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.202168][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.211266][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.219706][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.226820][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.235253][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.244967][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.254242][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.263703][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.272959][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.304678][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.314417][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.323513][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.333117][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.344315][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.353235][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.362214][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.371199][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.379555][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.388202][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.395863][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.403663][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.413006][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.421759][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.429726][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.441946][ T9813] device veth1_macvtap entered promiscuous mode [ 297.460136][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.474733][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.484597][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.493182][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.501911][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.533849][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.552973][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.566038][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.577911][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.586943][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.600115][ T9828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.612542][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.633567][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.643816][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.653029][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.661273][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.674554][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.698429][ T9825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.722593][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.733726][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.743234][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.754229][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.767770][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.825138][ T9828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.836177][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.845531][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.857727][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.867558][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.875874][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.885150][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.981696][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.991672][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.000082][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.011131][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.020464][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.029599][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.045429][ T9816] device veth0_vlan entered promiscuous mode [ 298.132392][ T9820] device veth0_vlan entered promiscuous mode [ 298.145407][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.155149][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.169943][ T9832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.192480][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.200420][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.226102][ T9820] device veth1_vlan entered promiscuous mode [ 298.234833][ T9825] device veth0_vlan entered promiscuous mode [ 298.243109][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.252603][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.261465][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.270112][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.278130][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.289266][ T9816] device veth1_vlan entered promiscuous mode [ 298.325167][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.369297][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.379537][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.402647][ T9825] device veth1_vlan entered promiscuous mode [ 298.445523][ T9828] device veth0_vlan entered promiscuous mode [ 298.455235][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.468120][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.477510][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.485760][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.493807][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.503179][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.532173][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.541533][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.549741][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.562873][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.580449][ T9832] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.593704][ T9820] device veth0_macvtap entered promiscuous mode [ 298.608685][ T9825] device veth0_macvtap entered promiscuous mode [ 298.630398][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.639378][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.648981][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.663232][ T9825] device veth1_macvtap entered promiscuous mode [ 298.682463][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.692383][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.700818][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.710091][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.719142][ T3238] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.726314][ T3238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.734487][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.743620][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.752760][ T3238] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.760029][ T3238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.769119][ T9820] device veth1_macvtap entered promiscuous mode [ 298.797949][ T9828] device veth1_vlan entered promiscuous mode [ 298.809577][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.819222][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.827761][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.836332][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.845168][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.875842][ T9816] device veth0_macvtap entered promiscuous mode [ 298.893413][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.904042][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.923729][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.938388][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.952587][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.964685][ T9816] device veth1_macvtap entered promiscuous mode [ 298.981469][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.991199][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.999609][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.009102][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.018622][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.030808][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 299.046241][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.056650][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 299.071199][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.085198][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.097003][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.109485][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.123109][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.143525][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.153615][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.163564][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.175767][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.185892][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 22:02:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) setreuid(0x0, 0xee01) socket$unix(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5d, 0x0) [ 299.196845][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.208610][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.240921][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.253212][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.263858][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.277890][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.298068][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 299.311843][ C1] hrtimer: interrupt took 74707 ns [ 299.315846][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.327532][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:02:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 299.339635][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.350151][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 299.361571][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.374028][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.402703][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.431409][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.451612][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.461375][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.470495][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.481230][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.491791][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.501479][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.510050][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.562523][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.574375][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.585065][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.595861][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:02:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 299.605989][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 299.617879][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.642041][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.757529][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.767626][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.777577][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.786398][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.795901][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.805628][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.818354][ T9828] device veth0_macvtap entered promiscuous mode 22:02:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 299.935188][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.977792][ T9828] device veth1_macvtap entered promiscuous mode [ 300.023479][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.041641][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.108984][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.170600][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.197986][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.209739][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:02:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) setreuid(0x0, 0xee01) dup2(0xffffffffffffffff, 0xffffffffffffffff) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000fe9000/0x4000)=nil, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5d, 0x0) [ 300.221787][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.235833][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.246346][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.257398][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.271661][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_0 22:02:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={[], 0x0, 0x100005, 0x5, 0x100000001}) [ 300.359695][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.378558][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.399966][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:02:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r1, 0x0, 0x40000, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) gettid() fallocate(r0, 0x0, 0x0, 0x10fffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fstatfs(r2, &(0x7f00000006c0)=""/4096) fdatasync(r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x48, r3, 0x100, 0x70bd2d, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x48}}, 0x44045) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) [ 300.436464][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.466015][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.514848][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.552049][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.567074][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.586522][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.607406][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.628885][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.642076][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.654188][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.726166][ T9832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.737733][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.753973][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.070201][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.078585][ T27] audit: type=1804 audit(1580940175.114:31): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1 [ 301.119009][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.175520][ T27] audit: type=1804 audit(1580940175.124:32): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1 [ 301.231380][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.238574][ T27] audit: type=1804 audit(1580940175.284:33): pid=9916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1 [ 301.240463][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.268880][ T27] audit: type=1804 audit(1580940175.314:34): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1 [ 301.302759][ T9832] device veth0_vlan entered promiscuous mode [ 301.312422][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.322086][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.338615][ T9832] device veth1_vlan entered promiscuous mode 22:02:55 executing program 1: open(0x0, 0x0, 0xe9) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd909}, 0x100) 22:02:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) setreuid(0x0, 0xee01) dup2(0xffffffffffffffff, 0xffffffffffffffff) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000fe9000/0x4000)=nil, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5d, 0x0) 22:02:55 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={[], 0x0, 0x100005, 0x5}) [ 301.389075][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.413479][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.443001][ T9926] debugfs: File 'dropped' in directory 'loop0' already present! [ 301.463499][ T9926] debugfs: File 'msg' in directory 'loop0' already present! [ 301.477971][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 22:02:55 executing program 4: open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) timer_create(0x8, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) open(0x0, 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) r0 = creat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r0}) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x10, 0x0, 0x8020001) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) r5 = creat(0x0, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 301.521668][ T9926] debugfs: File 'trace0' in directory 'loop0' already present! [ 301.536021][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.578504][ T9832] device veth0_macvtap entered promiscuous mode [ 301.634301][ T9832] device veth1_macvtap entered promiscuous mode [ 301.770210][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.866340][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.879677][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.897904][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.908337][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.928797][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.939232][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.956292][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.968257][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.979433][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.992138][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.017040][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.027304][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.036707][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.049381][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.062777][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.091359][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.101501][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.112312][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.122567][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.134301][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.144384][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.154876][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.164775][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.178486][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.195611][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.219155][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.229827][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:02:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c) 22:02:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3ff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x0, 0x2}]}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:02:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, &(0x7f00000002c0)="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"}) 22:02:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x30020000, 0x230, 0x0, 0x230, 0x230, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_to_hsr\x00'}, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bridge_slave_1\x00', {0x1, 0x0, 0x41, 0x0, 0x0, 0x5, 0x80000040, 0x20000003}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 22:02:56 executing program 1: open(0x0, 0x0, 0xe9) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd909}, 0x100) 22:02:56 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x2c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) [ 302.536666][ T9952] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 302.556687][ T9955] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 302.570986][ T9953] xt_CT: You must specify a L4 protocol and not use inversions on it 22:02:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5d, 0x0) 22:02:56 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r0 = memfd_create(0x0, 0x0) r1 = creat(&(0x7f0000000480)='./bus/file0\x00', 0x81) fallocate(r1, 0x0, 0x0, 0x2000002) read$eventfd(r1, 0x0, 0x0) fallocate(r0, 0x800000000000003, 0xfa9, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = msgget$private(0x0, 0x204) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/106) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1, 0x4, 0x4b7}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000600)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r8, 0x0, 0x8000fffffffe) 22:02:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2) 22:02:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2) 22:02:56 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x2c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) [ 302.965517][ T9975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 303.070156][ T9987] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 22:02:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5d, 0x0) 22:02:57 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @broadcast}, {0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:02:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5d, 0x0) 22:02:57 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f00000008c0)=ANY=[@ANYBLOB='mode=0']) 22:02:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) 22:02:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x0, @local}}, {{0x2, 0x0, @broadcast}}}, 0x104) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setuid(0xee01) 22:02:57 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x3e0, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f0000000380)=""/157, 0x3e, 0x9d, 0x8}, 0x20) [ 303.806678][T10012] BPF:btf_header not found 22:02:57 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r1, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r4, r5, 0x0) dup2(r7, r6) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) [ 303.862228][T10020] BPF:btf_header not found 22:02:57 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x40, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 22:02:57 executing program 1: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:02:58 executing program 2: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 22:02:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/arp\x00') lseek(r0, 0x4, 0x0) [ 304.161615][T10045] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. 22:02:58 executing program 4: syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='size=05%']) 22:02:58 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='wlan0nod\xe5vnodevs_lf,\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x7) 22:02:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x2800) 22:02:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 22:02:58 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r1, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r4, r5, 0x0) dup2(r7, r6) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 22:02:58 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xe0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x20, 0x6, 0x5, 0x23, 0x0, 0xfffffffffffffc00, 0x134aefb433e358, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x350, 0x100000001, 0x4, 0x1, 0x4, 0xfffffff8, 0xbc}, 0xffffffffffffffff, 0xf, r0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc004240a, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fb5c03658ff533b2311d03bea04ef26993f0ca2b9b57e81033c771dbea8c663cd917ac7b5c9e4446f0be500795e3b7418aafe62ea8378192b513a51ca71bde9eaebc8b5501a6f1b37c2a63c1ad8d4152f97f300ace783df728dc48f6438dae36"], 0x5c, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5743b46c00a9c63a4b89e7a4e25df40682a030d3d51bf2cc65cea3acfa42e3719665ce28707f2e62e5685fa45f8d258d358b512c74add39bd41100a55ae5441e942c7019e63cbea8e0eb07fe76e9652675ab74703d337e"], 0x48}}, 0x0) r7 = getpid() tkill(r7, 0x9) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) 22:02:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) 22:02:59 executing program 2: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 22:02:59 executing program 4: r0 = epoll_create1(0x0) r1 = socket(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 22:02:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[], 0x0, 0xffffffffffdce7bb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 305.129525][ T27] audit: type=1804 audit(1580940179.174:35): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir900326847/syzkaller.hNy8s9/13/bus" dev="sda1" ino=16531 res=1 [ 305.170092][T10108] BPF:[1] ARRAY (anon) [ 305.200068][T10111] BPF:[1] ARRAY (anon) [ 305.248188][T10117] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 305.278201][T10108] BPF:type_id=1 index_type_id=3 nr_elems=0 [ 305.284812][ T27] audit: type=1804 audit(1580940179.224:36): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir900326847/syzkaller.hNy8s9/13/bus" dev="sda1" ino=16531 res=1 [ 305.313140][T10111] BPF:type_id=1 index_type_id=3 nr_elems=0 [ 305.332705][T10108] BPF: 22:02:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 305.350490][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.364607][T10108] BPF:Invalid index [ 305.380034][T10108] BPF: [ 305.380034][T10108] [ 305.383749][T10111] BPF: 22:02:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x50000}, 0x0) [ 305.407987][T10111] BPF:Invalid index [ 305.446250][T10111] BPF: [ 305.446250][T10111] [ 305.483238][T10117] device gretap0 entered promiscuous mode [ 305.489370][T10117] device macvlan2 entered promiscuous mode [ 305.598987][T10117] device gretap0 left promiscuous mode [ 305.603683][T10133] BPF:[1] FUNC_PROTO (anon) [ 305.617520][T10133] BPF:return=2 args=( [ 305.659436][T10134] BPF:[1] FUNC_PROTO (anon) 22:02:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x50000}, 0x0) 22:02:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 305.689426][T10133] BPF:void [ 305.700775][T10134] BPF:return=2 args=( [ 305.702193][T10133] BPF:) [ 305.707744][T10133] BPF: [ 305.712090][T10133] BPF:Invalid return type [ 305.716590][T10133] BPF: [ 305.716590][T10133] 22:02:59 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f0000000380)=""/157, 0x3e, 0x9d, 0x8}, 0x20) [ 305.770019][T10134] BPF:void 22:02:59 executing program 5: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 305.841396][T10134] BPF:) [ 305.909687][T10134] BPF: [ 305.910131][T10148] BPF:[2] ARRAY (anon) [ 305.931055][T10134] BPF:Invalid return type [ 305.935705][T10152] BPF:[2] ARRAY (anon) [ 305.941018][T10148] BPF:type_id=1 index_type_id=1 nr_elems=0 [ 305.978742][T10152] BPF:type_id=1 index_type_id=1 nr_elems=0 [ 306.001139][T10134] BPF: [ 306.001139][T10134] [ 306.022314][T10148] BPF: 22:03:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x4000000) [ 306.036661][T10152] BPF: [ 306.058044][T10148] BPF:Invalid index [ 306.058062][T10157] BPF:[1] FUNC_PROTO (anon) [ 306.082730][T10152] BPF:Invalid index [ 306.100911][T10152] BPF: [ 306.100911][T10152] [ 306.111790][T10148] BPF: [ 306.111790][T10148] [ 306.142990][T10157] BPF:return=2 args=( [ 306.170688][T10157] BPF:void [ 306.178760][T10157] BPF:) [ 306.205423][T10157] BPF: [ 306.225480][T10157] BPF:Invalid return type [ 306.240839][T10157] BPF: [ 306.240839][T10157] [ 306.367054][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.378003][T10155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.392431][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.400019][T10155] batman_adv: batadv0: Removing interface: batadv_slave_1 22:03:00 executing program 0: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(0x0, 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:00 executing program 1: unshare(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x21a, 0x0, 0x59, 0x0, 0x1d7}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cgroup\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 22:03:00 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) syz_genetlink_get_family_id$fou(0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 22:03:00 executing program 3: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 306.992055][T10180] BPF:[1] FUNC_PROTO (anon) [ 307.043921][T10180] BPF:return=2 args=( [ 307.084755][T10180] BPF:void 22:03:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}}, 0x14}, 0x1, 0x50000}, 0x0) 22:03:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 307.114534][T10180] BPF:) [ 307.129971][T10180] BPF: [ 307.142900][T10180] BPF:Invalid return type [ 307.149669][T10180] BPF: [ 307.149669][T10180] [ 307.337407][T10200] BPF:[1] FUNC_PROTO (anon) [ 307.349728][T10200] BPF:return=2 args=( [ 307.369932][T10200] BPF:void [ 307.379701][T10200] BPF:) [ 307.398782][T10200] BPF: [ 307.408860][T10200] BPF:Invalid return type 22:03:01 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000240)) [ 307.547444][T10200] BPF: [ 307.547444][T10200] 22:03:01 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) acct(0x0) 22:03:01 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 307.938397][T10224] BPF:[1] FUNC_PROTO (anon) [ 307.972713][T10224] BPF:return=2 args=( [ 307.976740][T10224] BPF:void [ 307.979768][T10224] BPF:) [ 308.102177][T10224] BPF: [ 308.157989][T10224] BPF:Invalid return type [ 308.200656][T10224] BPF: [ 308.200656][T10224] 22:03:02 executing program 3: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:02 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) socket$inet6(0xa, 0x0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x5}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d7", 0x16}], 0x2}}], 0x1, 0x0) 22:03:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) 22:03:02 executing program 5: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:03:02 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) syz_genetlink_get_family_id$fou(0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) [ 308.384826][T10236] BPF:[1] FUNC_PROTO (anon) [ 308.416088][T10236] BPF:return=2 args=( [ 308.422324][T10236] BPF:void [ 308.425551][T10236] BPF:) [ 308.428473][T10236] BPF: [ 308.431765][T10236] BPF:Invalid return type [ 308.436240][T10236] BPF: [ 308.436240][T10236] 22:03:02 executing program 1: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:03:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 308.750388][T10255] BPF:[1] FUNC_PROTO (anon) [ 308.789331][T10255] BPF:return=2 args=( [ 308.813976][T10255] BPF:void [ 308.831659][T10255] BPF:) [ 308.848486][T10255] BPF: [ 308.856906][T10255] BPF:Invalid return type [ 308.870354][T10255] BPF: [ 308.870354][T10255] 22:03:03 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 309.048813][T10261] BPF:[1] FUNC_PROTO (anon) [ 309.059366][T10261] BPF:return=2 args=( [ 309.063865][T10261] BPF:void [ 309.067104][T10261] BPF:) [ 309.069880][T10261] BPF: [ 309.078149][T10261] BPF:Invalid return type [ 309.085234][T10261] BPF: [ 309.085234][T10261] 22:03:03 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) 22:03:03 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) [ 309.288749][T10269] BPF:[1] FUNC_PROTO (anon) [ 309.299792][T10269] BPF:return=2 args=( [ 309.307556][T10269] BPF:void [ 309.325931][T10269] BPF:) [ 309.328864][T10269] BPF: [ 309.345515][T10269] BPF:Invalid return type [ 309.350147][T10269] BPF: [ 309.350147][T10269] 22:03:03 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20) [ 309.514221][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.529363][T10252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.598628][T10280] BPF:[1] FUNC_PROTO (anon) [ 309.615038][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.629193][T10280] BPF:return=2 args=( [ 309.638967][T10252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.642911][T10280] BPF:void [ 309.658847][T10280] BPF:) [ 309.661831][T10280] BPF: [ 309.664888][T10280] BPF:Invalid return type [ 309.669548][T10280] BPF: [ 309.669548][T10280] 22:03:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 22:03:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 22:03:04 executing program 5: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:03:04 executing program 0: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x4, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000340)={0x7}, 0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000380)={[0x2000, 0x3000, 0x2, 0x2], 0x4, 0x78, 0x5}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) 22:03:04 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:04 executing program 2: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) [ 310.802863][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.814903][T10301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.855498][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.910480][T10301] batman_adv: batadv0: Removing interface: batadv_slave_1 22:03:05 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) memfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000280)='./file0\x00') io_submit(0x0, 0x0, 0x0) 22:03:05 executing program 5: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:03:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 22:03:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=""/157, 0x0, 0x9d, 0x8}, 0x20) 22:03:05 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) [ 311.675269][T10317] BPF:hdr_len not found 22:03:05 executing program 2: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=""/157, 0x0, 0x9d, 0x8}, 0x20) [ 311.961210][T10331] BPF:hdr_len not found 22:03:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=""/157, 0x0, 0x9d, 0x8}, 0x20) [ 312.288600][T10338] BPF:hdr_len not found 22:03:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20) [ 312.574782][T10345] BPF:[1] FUNC_PROTO (anon) [ 312.610206][T10345] BPF:return=2 args=( [ 312.637783][T10345] BPF:void [ 312.650163][T10345] BPF:) [ 312.667935][T10345] BPF: [ 312.692019][T10345] BPF:Invalid return type [ 312.724857][T10345] BPF: [ 312.724857][T10345] 22:03:08 executing program 0: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20) 22:03:08 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r2, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) [ 314.182024][T10353] BPF:[1] FUNC_PROTO (anon) [ 314.186678][T10353] BPF:return=2 args=( [ 314.210665][T10353] BPF:void [ 314.213892][T10353] BPF:) [ 314.216881][T10353] BPF: [ 314.219648][T10353] BPF:Invalid return type [ 314.230909][T10353] BPF: [ 314.230909][T10353] 22:03:08 executing program 1: unshare(0x24020400) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x3}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = socket(0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="73917b05be507515ca49dab8e83305c1"}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4) [ 315.182637][T10363] IPVS: ftp: loaded support on port[0] = 21 [ 315.247252][T10363] chnl_net:caif_netlink_parms(): no params data found [ 315.286907][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.294288][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.303223][T10363] device bridge_slave_0 entered promiscuous mode [ 315.312638][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.319795][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.328072][T10363] device bridge_slave_1 entered promiscuous mode [ 315.348500][T10363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.360163][T10363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.387385][T10363] team0: Port device team_slave_0 added [ 315.423879][T10363] team0: Port device team_slave_1 added [ 315.528184][T10363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.540118][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.591692][ T320] tipc: TX() has been purged, node left! [ 315.635614][T10363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.276291][T10363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.296148][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.366028][T10363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.488478][T10363] device hsr_slave_0 entered promiscuous mode [ 316.525763][T10363] device hsr_slave_1 entered promiscuous mode [ 316.586289][T10363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.605019][T10363] Cannot create hsr debugfs directory [ 317.010784][ C0] [ 317.013162][ C0] ================================ [ 317.018351][ C0] WARNING: inconsistent lock state [ 317.023584][ C0] 5.5.0-rc6-next-20200116-syzkaller #0 Not tainted [ 317.030094][ C0] -------------------------------- [ 317.035214][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 317.042068][ C0] ps/10385 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 317.047883][ C0] ffffffff8a03ce58 (ima_keys_lock){+.?.}, at: ima_process_queued_keys+0x4f/0x320 [ 317.058288][ C0] {SOFTIRQ-ON-W} state was registered at: [ 317.064311][ C0] lock_acquire+0x190/0x410 [ 317.069008][ C0] _raw_spin_lock+0x2f/0x40 [ 317.073790][ C0] ima_post_key_create_or_update+0x234/0x470 [ 317.079963][ C0] key_create_or_update+0x6b8/0xcb0 [ 317.085349][ C0] load_system_certificate_list+0x1ba/0x25e [ 317.091410][ C0] do_one_initcall+0x120/0x820 [ 317.096322][ C0] kernel_init_freeable+0x522/0x5d0 [ 317.101652][ C0] kernel_init+0x12/0x1bf [ 317.106087][ C0] ret_from_fork+0x24/0x30 [ 317.110590][ C0] irq event stamp: 66054 [ 317.114846][ C0] hardirqs last enabled at (66054): [] _raw_spin_unlock_irq+0x23/0x80 [ 317.124779][ C0] hardirqs last disabled at (66053): [] _raw_spin_lock_irq+0x3a/0x80 [ 317.134609][ C0] softirqs last enabled at (65644): [] __do_softirq+0x6cd/0x98c [ 317.143967][ C0] softirqs last disabled at (66051): [] irq_exit+0x19b/0x1e0 [ 317.152910][ C0] [ 317.152910][ C0] other info that might help us debug this: [ 317.160982][ C0] Possible unsafe locking scenario: [ 317.160982][ C0] [ 317.168523][ C0] CPU0 [ 317.171804][ C0] ---- [ 317.175168][ C0] lock(ima_keys_lock); [ 317.179406][ C0] [ 317.182861][ C0] lock(ima_keys_lock); [ 317.187278][ C0] [ 317.187278][ C0] *** DEADLOCK *** [ 317.187278][ C0] [ 317.195432][ C0] 2 locks held by ps/10385: [ 317.199946][ C0] #0: ffffffff8a01bbe8 (tomoyo_ss){....}, at: tomoyo_check_open_permission+0xfe/0x3e0 [ 317.209652][ C0] #1: ffffc90000007d50 ((&ima_key_queue_timer)){+.-.}, at: call_timer_fn+0xe0/0x780 [ 317.219179][ C0] [ 317.219179][ C0] stack backtrace: [ 317.225079][ C0] CPU: 0 PID: 10385 Comm: ps Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 317.233923][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.244007][ C0] Call Trace: [ 317.247288][ C0] [ 317.250226][ C0] dump_stack+0x197/0x210 [ 317.254621][ C0] print_usage_bug.cold+0x327/0x378 [ 317.259953][ C0] mark_lock+0xbb4/0x1220 [ 317.264296][ C0] ? check_usage_backwards+0x330/0x330 [ 317.269768][ C0] __lock_acquire+0x1e8e/0x4a00 [ 317.274637][ C0] ? alloc_list_entry+0xc0/0xc0 [ 317.279563][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.286167][ C0] ? find_first_zero_bit+0x9a/0xc0 [ 317.291425][ C0] ? mark_held_locks+0xf0/0xf0 [ 317.296181][ C0] lock_acquire+0x190/0x410 [ 317.300690][ C0] ? ima_process_queued_keys+0x4f/0x320 [ 317.306339][ C0] _raw_spin_lock+0x2f/0x40 [ 317.310928][ C0] ? ima_process_queued_keys+0x4f/0x320 [ 317.316455][ C0] ima_process_queued_keys+0x4f/0x320 [ 317.321997][ C0] ima_timer_handler+0x15/0x20 [ 317.326784][ C0] call_timer_fn+0x1ac/0x780 [ 317.331450][ C0] ? ima_process_queued_keys+0x320/0x320 [ 317.337181][ C0] ? msleep_interruptible+0x150/0x150 [ 317.342549][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 317.347785][ C0] ? trace_hardirqs_on+0x67/0x240 [ 317.352811][ C0] ? ima_process_queued_keys+0x320/0x320 [ 317.358425][ C0] ? ima_process_queued_keys+0x320/0x320 [ 317.364058][ C0] run_timer_softirq+0x6c3/0x1790 [ 317.369066][ C0] ? add_timer+0x930/0x930 [ 317.373589][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 317.379867][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 317.385555][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 317.391537][ C0] ? trace_hardirqs_on+0x67/0x240 [ 317.396548][ C0] __do_softirq+0x262/0x98c [ 317.401406][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 317.406272][ C0] irq_exit+0x19b/0x1e0 [ 317.410542][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 317.416079][ C0] apic_timer_interrupt+0xf/0x20 [ 317.421000][ C0] [ 317.423937][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 317.430000][ C0] Code: ff cc cc cc cc cc cc cc cc cc 65 48 8b 04 25 c0 1e 02 00 48 8b 80 a0 13 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 65 48 8b 04 25 c0 1e 02 00 65 8b 15 a4 86 8c 7e 81 e2 [ 317.449607][ C0] RSP: 0018:ffffc90001697438 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 317.458013][ C0] RAX: 0000000000000000 RBX: 0000000000000010 RCX: ffffffff83697fb5 [ 317.466065][ C0] RDX: 0000000000000010 RSI: 0000000000000010 RDI: 0000000000000001 [ 317.474030][ C0] RBP: ffffc90001697480 R08: ffff88804d6c0240 R09: fffffbfff17464f1 [ 317.482100][ C0] R10: fffffbfff17464f0 R11: ffffffff8ba32787 R12: ffff888093a8d000 [ 317.490072][ C0] R13: 0000000000000002 R14: 0000000000000169 R15: 0000000000000000 [ 317.498095][ C0] ? tomoyo_domain_quota_is_ok+0x335/0x540 [ 317.503929][ C0] ? tomoyo_domain_quota_is_ok+0xe9/0x540 [ 317.509635][ C0] tomoyo_supervisor+0x286/0xe60 [ 317.514555][ C0] ? tomoyo_update_stat+0x80/0x80 [ 317.519850][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 317.524792][ C0] ? trace_hardirqs_off+0x62/0x240 [ 317.529892][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 317.536222][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.542468][ C0] ? tomoyo_check_path_acl+0x91/0x130 [ 317.547939][ C0] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 317.558479][ C0] ? tomoyo_check_acl+0x229/0x3e0 [ 317.563866][ C0] tomoyo_path_permission+0x263/0x360 [ 317.569242][ C0] ? tomoyo_fill_path_info+0x23c/0x430 [ 317.574696][ C0] tomoyo_check_open_permission+0x3a6/0x3e0 [ 317.581213][ C0] ? enable_cpucache.cold+0x2/0x1e [ 317.586875][ C0] ? tomoyo_path_number_perm+0x520/0x520 [ 317.593235][ C0] ? __kasan_check_read+0x11/0x20 [ 317.598359][ C0] ? lock_downgrade+0x920/0x920 [ 317.603395][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 317.608753][ C0] tomoyo_file_open+0xa9/0xd0 [ 317.613477][ C0] security_file_open+0x71/0x300 [ 317.618966][ C0] do_dentry_open+0x365/0x1350 [ 317.623754][ C0] ? lock_downgrade+0x920/0x920 [ 317.629572][ C0] ? chown_common+0x5c0/0x5c0 [ 317.636113][ C0] ? inode_permission+0xb4/0x520 [ 317.641156][ C0] vfs_open+0xa0/0xd0 [ 317.645151][ C0] path_openat+0x12fd/0x34d0 [ 317.649766][ C0] ? path_mountpoint.isra.0+0x370/0x370 [ 317.656035][ C0] ? __alloc_fd+0x487/0x620 [ 317.661276][ C0] do_filp_open+0x192/0x260 [ 317.666393][ C0] ? may_open_dev+0x100/0x100 [ 317.671444][ C0] ? do_raw_spin_unlock+0x181/0x270 [ 317.676776][ C0] ? _raw_spin_unlock+0x28/0x40 [ 317.681635][ C0] do_sys_openat2+0x633/0x840 [ 317.686653][ C0] ? file_open_root+0x5f0/0x5f0 [ 317.691612][ C0] ? lock_downgrade+0x920/0x920 [ 317.696811][ C0] ? blkcg_maybe_throttle_current+0x5ca/0xfc0 [ 317.702933][ C0] do_sys_open+0xfc/0x190 [ 317.707344][ C0] ? filp_open+0x80/0x80 [ 317.711591][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 317.717469][ C0] ? do_syscall_64+0x26/0x790 [ 317.722236][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.728689][ C0] ? do_syscall_64+0x26/0x790 [ 317.733459][ C0] __x64_sys_open+0x7e/0xc0 [ 317.738829][ C0] do_syscall_64+0xfa/0x790 [ 317.743552][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.749758][ C0] RIP: 0033:0x7fd269dfc120 [ 317.754246][ C0] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 317.774011][ C0] RSP: 002b:00007fffc16b1b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 317.782513][ C0] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007fd269dfc120 [ 317.790789][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fd26a2cad00 [ 317.798802][ C0] RBP: 0000000000001000 R08: 0000000000000000 R09: 00007fd26a0c457b [ 317.806791][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd26a2c9d00 [ 317.814774][ C0] R13: 0000000000000020 R14: 0000000000000005 R15: 0000000000000000 [ 317.927412][T10363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.946104][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.954162][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.968815][T10363] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.982804][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.991997][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.000347][ T2707] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.007620][ T2707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.017056][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.025874][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.034739][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.043369][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.050617][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.099897][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.109535][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.121967][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.130481][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.139325][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.150813][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.159355][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.171724][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.180310][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.192274][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.200987][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.211584][T10363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.230133][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.237867][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.251177][T10363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.321682][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.330419][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.350717][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.359068][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.368804][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.376585][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.386399][T10363] device veth0_vlan entered promiscuous mode [ 318.399305][T10363] device veth1_vlan entered promiscuous mode [ 318.423059][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.431791][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.439863][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.450367][T10363] device veth0_macvtap entered promiscuous mode [ 318.461499][T10363] device veth1_macvtap entered promiscuous mode [ 318.478177][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 318.489095][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.499622][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 318.510136][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.520043][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 318.531187][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.543280][T10363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.552991][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.561371][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.570022][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.580847][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 318.595741][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.606300][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 318.617418][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.627611][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 318.638097][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.649558][T10363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.687228][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.696268][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.936604][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.945260][T10404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.955502][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.963334][T10404] batman_adv: batadv0: Removing interface: batadv_slave_1 22:03:13 executing program 5: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 22:03:13 executing program 2: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20) 22:03:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) socket$inet6(0xa, 0x0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54) 22:03:13 executing program 0: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:13 executing program 1: mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1", 0x10}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x2}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000240)) [ 319.415153][T10410] BPF:[1] FUNC_PROTO (anon) [ 319.436229][T10410] BPF:return=2 args=( [ 319.453887][T10410] BPF:void [ 319.460917][T10410] BPF:) [ 319.467212][T10410] BPF: [ 319.474362][T10410] BPF:Invalid return type [ 319.481859][T10410] BPF: [ 319.481859][T10410] 22:03:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20) 22:03:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20) 22:03:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20) 22:03:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x8}, 0x20) 22:03:14 executing program 2: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x8}, 0x20) 22:03:14 executing program 5: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 22:03:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x8}, 0x20) 22:03:14 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) socket$inet6(0xa, 0x0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54) 22:03:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d}, 0x20) [ 320.352542][ T320] device bridge_slave_1 left promiscuous mode [ 320.363977][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.452806][ T320] device bridge_slave_0 left promiscuous mode [ 320.461346][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.524176][ T320] device veth1_macvtap left promiscuous mode [ 320.535733][ T320] device veth0_macvtap left promiscuous mode [ 320.549745][ T320] device veth1_vlan left promiscuous mode [ 320.573365][ T320] device veth0_vlan left promiscuous mode [ 322.303058][ T320] device hsr_slave_0 left promiscuous mode [ 322.350676][ T320] device hsr_slave_1 left promiscuous mode [ 322.400875][ T320] team0 (unregistering): Port device team_slave_1 removed [ 322.412027][ T320] team0 (unregistering): Port device team_slave_0 removed [ 322.422702][ T320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.454111][ T320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.555260][ T320] bond0 (unregistering): Released all slaves [ 322.705244][T10468] IPVS: ftp: loaded support on port[0] = 21 [ 322.705261][T10470] IPVS: ftp: loaded support on port[0] = 21 [ 322.780084][T10468] chnl_net:caif_netlink_parms(): no params data found [ 322.823551][T10470] chnl_net:caif_netlink_parms(): no params data found [ 322.842040][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.849182][T10468] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.859006][T10468] device bridge_slave_0 entered promiscuous mode [ 322.870069][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.877333][T10468] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.885207][T10468] device bridge_slave_1 entered promiscuous mode [ 322.907209][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.930334][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.955097][T10468] team0: Port device team_slave_0 added [ 322.967190][T10468] team0: Port device team_slave_1 added [ 322.983987][T10470] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.991223][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.999069][T10470] device bridge_slave_0 entered promiscuous mode [ 323.007447][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.017310][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.043330][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.054258][T10470] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.061750][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.069377][T10470] device bridge_slave_1 entered promiscuous mode [ 323.077591][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.084601][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.112847][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.137782][T10470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.153570][T10470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.212913][T10468] device hsr_slave_0 entered promiscuous mode [ 323.251290][T10468] device hsr_slave_1 entered promiscuous mode [ 323.291637][T10468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.299594][T10468] Cannot create hsr debugfs directory [ 323.319112][T10470] team0: Port device team_slave_0 added [ 323.330004][T10470] team0: Port device team_slave_1 added [ 323.352011][T10470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.359343][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.385924][T10470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.402440][T10470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.409483][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.411626][ T0] NOHZ: local_softirq_pending 08 [ 323.436344][T10470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.502721][T10470] device hsr_slave_0 entered promiscuous mode [ 323.540935][T10470] device hsr_slave_1 entered promiscuous mode [ 323.580663][T10470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.588251][T10470] Cannot create hsr debugfs directory [ 323.645921][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.653799][T10468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.661176][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.668293][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.700390][T10470] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.707501][T10470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.714838][T10470] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.721957][T10470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.734225][ T2713] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.742193][ T2713] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.751371][ T2713] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.759143][ T2713] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.800789][T10468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.821264][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.828937][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.845205][T10468] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.857355][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.867315][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.875860][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.882978][T10395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.900181][T10470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.908370][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.917056][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.925836][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.932928][T10395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.950313][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.959322][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.968133][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.976544][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.989404][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.999604][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.010131][T10470] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.026986][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.035109][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.043885][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.053904][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.062668][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.077756][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.087000][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.095649][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.102919][T10395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.111438][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.119889][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.128583][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.137496][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.145885][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.152975][T10395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.161793][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.176252][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.192774][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.202723][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.212091][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.222415][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.235523][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.244613][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.262627][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.271193][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.279512][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.288112][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.299019][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.309165][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.323699][T10468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.331761][T10470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.358133][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.366940][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.382880][T10470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.407485][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.416302][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.446927][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.456636][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.465671][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.474236][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.485932][T10468] device veth0_vlan entered promiscuous mode [ 324.502830][T10468] device veth1_vlan entered promiscuous mode [ 324.516064][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.524629][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.533613][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.542423][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.570161][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.580345][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.593638][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.602491][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.611342][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.619164][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.627606][T10468] device veth0_macvtap entered promiscuous mode [ 324.638851][T10470] device veth0_vlan entered promiscuous mode [ 324.647637][T10468] device veth1_macvtap entered promiscuous mode [ 324.664117][T10470] device veth1_vlan entered promiscuous mode [ 324.675735][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.686445][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.696858][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.707535][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.717818][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.728417][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.739170][T10468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.749980][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.758832][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.766723][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.774910][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.783094][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.792002][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.803767][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.814998][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.825464][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.836537][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.846399][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.857363][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.868271][T10468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.878902][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.888450][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.944442][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.953033][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.012321][T10470] device veth0_macvtap entered promiscuous mode [ 325.023839][T10470] device veth1_macvtap entered promiscuous mode [ 325.041182][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.051699][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.062862][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.079695][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.089944][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.101172][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.111285][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.122056][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.133390][T10470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.145226][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.154480][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.162698][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.171485][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.185766][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.196636][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.207550][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.218182][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.228078][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.238524][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.248475][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.260175][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.271203][T10470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.284070][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.292724][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:03:19 executing program 0: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x10002) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000340)={0x7}, 0x7) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x2, {0x1, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:03:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d}, 0x20) 22:03:19 executing program 5: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 22:03:19 executing program 2: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x110) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r5, r6, 0x0) dup2(r8, r7) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 22:03:19 executing program 1: mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1", 0x10}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x2}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000240)) 22:03:19 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) socket$inet6(0xa, 0x0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54) 22:03:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d}, 0x20) 22:03:20 executing program 4: [ 326.030407][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.089932][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0 22:03:20 executing program 4: [ 326.130436][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.159123][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1 22:03:20 executing program 4: 22:03:20 executing program 4: 22:03:20 executing program 2: 22:03:21 executing program 0: msgget$private(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x10002) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000340)={0x7}, 0x7) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x2, {0x1, 0x1}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:03:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102}) flock(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) socket$inet6(0xa, 0x0, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54)