Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts.
2020/02/05 21:59:41 fuzzer started
2020/02/05 21:59:43 dialing manager at 10.128.0.26:35493
2020/02/05 21:59:43 syscalls: 2939
2020/02/05 21:59:43 code coverage: enabled
2020/02/05 21:59:43 comparison tracing: enabled
2020/02/05 21:59:43 extra coverage: enabled
2020/02/05 21:59:43 setuid sandbox: enabled
2020/02/05 21:59:43 namespace sandbox: enabled
2020/02/05 21:59:43 Android sandbox: /sys/fs/selinux/policy does not exist
2020/02/05 21:59:43 fault injection: enabled
2020/02/05 21:59:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/02/05 21:59:43 net packet injection: enabled
2020/02/05 21:59:43 net device setup: enabled
2020/02/05 21:59:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/02/05 21:59:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
22:02:44 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
read$eventfd(r0, &(0x7f0000000100), 0x8)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

22:02:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x8003, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r0 = open(0x0, 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b)
fdatasync(0xffffffffffffffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200))
open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
fdatasync(r1)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r2 = open(0x0, 0x141042, 0x0)
creat(0x0, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r4 = creat(0x0, 0x0)
fdatasync(r4)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0)
r5 = creat(0x0, 0x0)
write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r6, 0x10, 0x8003, 0x8020001)
r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
fdatasync(r8)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, 0x0)
r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r9, &(0x7f0000000280), 0x1033b)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

syzkaller login: [  290.167799][ T9813] IPVS: ftp: loaded support on port[0] = 21
[  290.371983][ T9813] chnl_net:caif_netlink_parms(): no params data found
22:02:44 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6)
write$binfmt_elf64(r0, 0x0, 0x18)

[  290.419029][ T9816] IPVS: ftp: loaded support on port[0] = 21
[  290.573455][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.586334][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.611833][ T9813] device bridge_slave_0 entered promiscuous mode
[  290.640839][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.648248][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.657509][ T9813] device bridge_slave_1 entered promiscuous mode
[  290.688549][ T9820] IPVS: ftp: loaded support on port[0] = 21
[  290.713116][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.763551][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
22:02:44 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f00000000c0), 0x4)

[  290.823089][ T9816] chnl_net:caif_netlink_parms(): no params data found
[  290.839571][ T9813] team0: Port device team_slave_0 added
[  290.872795][ T9813] team0: Port device team_slave_1 added
[  290.984984][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.992487][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.019898][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.058872][ T9825] IPVS: ftp: loaded support on port[0] = 21
[  291.080944][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.087941][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.122108][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.162974][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.170179][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.180657][ T9816] device bridge_slave_0 entered promiscuous mode
[  291.197215][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.204440][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state
22:02:45 executing program 4:
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0)
timer_create(0x8, 0x0, &(0x7f0000000040))
socket$unix(0x1, 0x0, 0x0)
open(0x0, 0x141042, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b)
r0 = creat(0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r0})
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r2, 0x10, 0x0, 0x8020001)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b)
fdatasync(r4)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4})
r5 = creat(0x0, 0x0)
write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

[  291.215613][ T9816] device bridge_slave_1 entered promiscuous mode
[  291.223261][ T9820] chnl_net:caif_netlink_parms(): no params data found
[  291.313860][ T9813] device hsr_slave_0 entered promiscuous mode
[  291.370941][ T9813] device hsr_slave_1 entered promiscuous mode
[  291.455941][ T9828] IPVS: ftp: loaded support on port[0] = 21
[  291.468754][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.487843][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
22:02:45 executing program 5:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x7}, {0x6}]}, 0x10)

[  291.571351][ T9816] team0: Port device team_slave_0 added
[  291.579886][ T9816] team0: Port device team_slave_1 added
[  291.696381][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.706592][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.715982][ T9820] device bridge_slave_0 entered promiscuous mode
[  291.732445][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.739554][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.748240][ T9820] device bridge_slave_1 entered promiscuous mode
[  291.756349][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.763578][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.790379][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.831111][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.838326][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.864932][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.919723][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.931423][ T9832] IPVS: ftp: loaded support on port[0] = 21
[  291.968547][ T9825] chnl_net:caif_netlink_parms(): no params data found
[  291.985768][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.052561][ T9816] device hsr_slave_0 entered promiscuous mode
[  292.090888][ T9816] device hsr_slave_1 entered promiscuous mode
[  292.130711][ T9816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.141313][ T9816] Cannot create hsr debugfs directory
[  292.233398][ T9820] team0: Port device team_slave_0 added
[  292.267817][ T9820] team0: Port device team_slave_1 added
[  292.285777][ T9813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  292.346348][ T9813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  292.418250][ T9813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  292.481121][ T9828] chnl_net:caif_netlink_parms(): no params data found
[  292.505805][ T9813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  292.588692][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.596990][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.606355][ T9825] device bridge_slave_0 entered promiscuous mode
[  292.618926][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.626709][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.635111][ T9825] device bridge_slave_1 entered promiscuous mode
[  292.645537][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.652948][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.679773][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.702356][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.709474][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.741055][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.809245][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.852310][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.932772][ T9820] device hsr_slave_0 entered promiscuous mode
[  292.981031][ T9820] device hsr_slave_1 entered promiscuous mode
[  293.020784][ T9820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.028784][ T9820] Cannot create hsr debugfs directory
[  293.049119][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.056669][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.064850][ T9828] device bridge_slave_0 entered promiscuous mode
[  293.073717][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.080907][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.089157][ T9828] device bridge_slave_1 entered promiscuous mode
[  293.098869][ T9825] team0: Port device team_slave_0 added
[  293.137137][ T9828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.149702][ T9825] team0: Port device team_slave_1 added
[  293.175495][ T9828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.199175][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.206502][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.234431][ T9825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.294969][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.302167][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.329842][ T9825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.365353][ T9832] chnl_net:caif_netlink_parms(): no params data found
[  293.398691][ T9828] team0: Port device team_slave_0 added
[  293.411766][ T9828] team0: Port device team_slave_1 added
[  293.441236][ T9816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  293.533014][ T9825] device hsr_slave_0 entered promiscuous mode
[  293.571992][ T9825] device hsr_slave_1 entered promiscuous mode
[  293.620839][ T9825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.628615][ T9825] Cannot create hsr debugfs directory
[  293.635219][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.642402][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.669005][ T9828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.682937][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.689933][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.716454][ T9828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.736202][ T9816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  293.838251][ T9816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  293.872825][ T9816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  294.004052][ T9828] device hsr_slave_0 entered promiscuous mode
[  294.060932][ T9828] device hsr_slave_1 entered promiscuous mode
[  294.130746][ T9828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.138584][ T9828] Cannot create hsr debugfs directory
[  294.163876][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.272306][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.283206][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.293654][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.301328][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.309236][ T9832] device bridge_slave_0 entered promiscuous mode
[  294.318114][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.325290][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.333267][ T9832] device bridge_slave_1 entered promiscuous mode
[  294.369150][ T9813] 8021q: adding VLAN 0 to HW filter on device team0
[  294.407656][ T9820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  294.463821][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.473480][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.482897][ T3238] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.490716][ T3238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.499077][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  294.508843][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  294.517477][ T3238] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.524552][ T3238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.564113][ T9820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  294.614265][ T9820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  294.673739][ T9832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.683357][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  294.697350][ T9832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.732179][ T9820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  294.805139][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  294.828059][ T9832] team0: Port device team_slave_0 added
[  294.838688][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  294.856811][ T9832] team0: Port device team_slave_1 added
[  294.878821][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.886861][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.914572][ T9832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.929464][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  294.939277][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  294.947765][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  294.961126][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  294.969892][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  294.988044][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.995410][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.024957][ T9832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.103947][ T9832] device hsr_slave_0 entered promiscuous mode
[  295.140870][ T9832] device hsr_slave_1 entered promiscuous mode
[  295.190665][ T9832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.198291][ T9832] Cannot create hsr debugfs directory
[  295.227475][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.236539][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.248739][ T9825] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  295.323270][ T9825] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  295.379184][ T9828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  295.455712][ T9825] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  295.506450][ T9825] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  295.566090][ T9813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.580408][ T9813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.593672][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.602268][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.610835][ T9828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  295.653664][ T9828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  295.757325][ T9828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  295.829242][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  295.838270][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  295.871899][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.882160][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.940956][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  295.950114][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  295.973507][ T9816] 8021q: adding VLAN 0 to HW filter on device team0
[  296.021402][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.030088][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  296.040810][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  296.084103][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  296.094669][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  296.108519][ T2707] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.117467][ T2707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.126953][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  296.136168][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  296.146635][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  296.173903][ T9820] 8021q: adding VLAN 0 to HW filter on device team0
[  296.198898][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  296.208045][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.217697][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  296.228055][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  296.236734][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.244384][ T2713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.255356][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  296.265949][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  296.275067][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  296.286522][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  296.317112][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.327969][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.336660][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  296.346922][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  296.357314][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  296.381044][ T9813] device veth0_vlan entered promiscuous mode
[  296.388009][ T9832] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  296.456290][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.477990][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  296.487288][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  296.496725][ T2741] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.504329][ T2741] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.516427][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  296.525894][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  296.537476][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.544964][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.553025][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  296.562040][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  296.571276][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  296.579746][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  296.588616][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  296.597365][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  296.608754][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  296.617255][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  296.627714][ T9832] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  296.686009][ T9825] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.719226][ T9832] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  296.773687][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  296.785632][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  296.794504][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  296.804020][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  296.812788][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  296.821379][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  296.839871][ T9825] 8021q: adding VLAN 0 to HW filter on device team0
[  296.855298][ T9813] device veth1_vlan entered promiscuous mode
[  296.863373][ T9832] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  296.908596][ T9828] 8021q: adding VLAN 0 to HW filter on device team0
[  296.915989][ T9820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  296.927494][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  296.935783][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  296.944369][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  296.952822][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  296.960399][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  296.968757][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  296.977100][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  296.985313][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  297.031336][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  297.040175][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  297.049274][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.056379][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.064558][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  297.074479][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  297.083402][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.090685][ T2713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.098669][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  297.107859][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  297.116543][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  297.126682][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.134096][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.170163][ T9813] device veth0_macvtap entered promiscuous mode
[  297.184533][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  297.193556][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  297.202168][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  297.211266][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  297.219706][ T2741] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.226820][ T2741] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.235253][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  297.244967][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  297.254242][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  297.263703][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  297.272959][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  297.304678][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  297.314417][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  297.323513][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  297.333117][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  297.344315][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  297.353235][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  297.362214][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  297.371199][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  297.379555][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  297.388202][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  297.395863][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  297.403663][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  297.413006][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  297.421759][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  297.429726][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  297.441946][ T9813] device veth1_macvtap entered promiscuous mode
[  297.460136][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.474733][ T9825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  297.484597][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  297.493182][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  297.501911][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  297.533849][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.552973][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  297.566038][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  297.577911][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  297.586943][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  297.600115][ T9828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.612542][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  297.633567][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  297.643816][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  297.653029][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  297.661273][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  297.674554][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.698429][ T9825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.722593][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  297.733726][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  297.743234][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  297.754229][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  297.767770][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.825138][ T9828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.836177][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  297.845531][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  297.857727][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  297.867558][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  297.875874][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  297.885150][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  297.981696][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  297.991672][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  298.000082][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  298.011131][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  298.020464][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  298.029599][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  298.045429][ T9816] device veth0_vlan entered promiscuous mode
[  298.132392][ T9820] device veth0_vlan entered promiscuous mode
[  298.145407][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  298.155149][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  298.169943][ T9832] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.192480][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  298.200420][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  298.226102][ T9820] device veth1_vlan entered promiscuous mode
[  298.234833][ T9825] device veth0_vlan entered promiscuous mode
[  298.243109][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  298.252603][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  298.261465][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  298.270112][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  298.278130][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  298.289266][ T9816] device veth1_vlan entered promiscuous mode
[  298.325167][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  298.369297][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  298.379537][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  298.402647][ T9825] device veth1_vlan entered promiscuous mode
[  298.445523][ T9828] device veth0_vlan entered promiscuous mode
[  298.455235][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  298.468120][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  298.477510][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  298.485760][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  298.493807][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  298.503179][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  298.532173][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  298.541533][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  298.549741][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  298.562873][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  298.580449][ T9832] 8021q: adding VLAN 0 to HW filter on device team0
[  298.593704][ T9820] device veth0_macvtap entered promiscuous mode
[  298.608685][ T9825] device veth0_macvtap entered promiscuous mode
[  298.630398][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  298.639378][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  298.648981][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  298.663232][ T9825] device veth1_macvtap entered promiscuous mode
[  298.682463][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  298.692383][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  298.700818][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  298.710091][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  298.719142][ T3238] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.726314][ T3238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.734487][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  298.743620][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  298.752760][ T3238] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.760029][ T3238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.769119][ T9820] device veth1_macvtap entered promiscuous mode
[  298.797949][ T9828] device veth1_vlan entered promiscuous mode
[  298.809577][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  298.819222][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  298.827761][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  298.836332][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  298.845168][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  298.875842][ T9816] device veth0_macvtap entered promiscuous mode
[  298.893413][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  298.904042][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  298.923729][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  298.938388][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.952587][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.964685][ T9816] device veth1_macvtap entered promiscuous mode
[  298.981469][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  298.991199][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  298.999609][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  299.009102][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  299.018622][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  299.030808][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  299.046241][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.056650][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  299.071199][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.085198][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.097003][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  299.109485][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.123109][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.143525][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  299.153615][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  299.163564][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  299.175767][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  299.185892][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
22:02:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
setreuid(0x0, 0xee01)
socket$unix(0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x5d, 0x0)

[  299.196845][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  299.208610][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  299.240921][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.253212][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  299.263858][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.277890][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.298068][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  299.311843][    C1] hrtimer: interrupt took 74707 ns
[  299.315846][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.327532][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
22:02:53 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  299.339635][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.350151][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  299.361571][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.374028][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.402703][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  299.431409][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  299.451612][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  299.461375][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  299.470495][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  299.481230][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  299.491791][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  299.501479][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  299.510050][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  299.562523][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  299.574375][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.585065][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  299.595861][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
22:02:53 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  299.605989][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  299.617879][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.642041][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.757529][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  299.767626][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  299.777577][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  299.786398][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  299.795901][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  299.805628][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  299.818354][ T9828] device veth0_macvtap entered promiscuous mode
22:02:54 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  299.935188][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  299.977792][ T9828] device veth1_macvtap entered promiscuous mode
[  300.023479][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  300.041641][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  300.108984][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  300.170600][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.197986][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  300.209739][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
22:02:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
setreuid(0x0, 0xee01)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil)
shmat(0x0, &(0x7f0000fe9000/0x4000)=nil, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x5d, 0x0)

[  300.221787][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  300.235833][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.246346][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  300.257398][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.271661][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_0
22:02:54 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={[], 0x0, 0x100005, 0x5, 0x100000001})

[  300.359695][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  300.378558][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  300.399966][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
22:02:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$P9_RREAD(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0)
fallocate(r1, 0x0, 0x40000, 0x4)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
gettid()
fallocate(r0, 0x0, 0x0, 0x10fffe)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fstatfs(r2, &(0x7f00000006c0)=""/4096)
fdatasync(r1)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x48, r3, 0x100, 0x70bd2d, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x48}}, 0x44045)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})

[  300.436464][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  300.466015][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  300.514848][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.552049][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  300.567074][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.586522][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  300.607406][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.628885][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  300.642076][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.654188][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.726166][ T9832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.737733][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  300.753973][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  301.070201][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  301.078585][   T27] audit: type=1804 audit(1580940175.114:31): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1
[  301.119009][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  301.175520][   T27] audit: type=1804 audit(1580940175.124:32): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1
[  301.231380][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  301.238574][   T27] audit: type=1804 audit(1580940175.284:33): pid=9916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1
[  301.240463][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  301.268880][   T27] audit: type=1804 audit(1580940175.314:34): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir930905876/syzkaller.ofnVOq/0/bus" dev="sda1" ino=16525 res=1
[  301.302759][ T9832] device veth0_vlan entered promiscuous mode
[  301.312422][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  301.322086][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  301.338615][ T9832] device veth1_vlan entered promiscuous mode
22:02:55 executing program 1:
open(0x0, 0x0, 0xe9)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd909}, 0x100)

22:02:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
setreuid(0x0, 0xee01)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil)
shmat(0x0, &(0x7f0000fe9000/0x4000)=nil, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x5d, 0x0)

22:02:55 executing program 3:
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={[], 0x0, 0x100005, 0x5})

[  301.389075][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  301.413479][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  301.443001][ T9926] debugfs: File 'dropped' in directory 'loop0' already present!
[  301.463499][ T9926] debugfs: File 'msg' in directory 'loop0' already present!
[  301.477971][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
22:02:55 executing program 4:
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)={'L-', 0x80000000}, 0x16, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0)
timer_create(0x8, 0x0, &(0x7f0000000040))
socket$unix(0x1, 0x0, 0x0)
open(0x0, 0x141042, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b)
r0 = creat(0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r0})
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r2, 0x10, 0x0, 0x8020001)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b)
fdatasync(r4)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4})
r5 = creat(0x0, 0x0)
write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

[  301.521668][ T9926] debugfs: File 'trace0' in directory 'loop0' already present!
[  301.536021][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  301.578504][ T9832] device veth0_macvtap entered promiscuous mode
[  301.634301][ T9832] device veth1_macvtap entered promiscuous mode
[  301.770210][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  301.866340][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.879677][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  301.897904][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.908337][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  301.928797][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.939232][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  301.956292][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.968257][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  301.979433][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.992138][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.017040][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  302.027304][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  302.036707][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  302.049381][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  302.062777][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  302.091359][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.101501][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  302.112312][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.122567][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  302.134301][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.144384][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  302.154876][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.164775][ T9832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  302.178486][ T9832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.195611][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.219155][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  302.229827][ T2741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
22:02:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @rand_addr=0x40}}}, 0x9c)

22:02:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x3ff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x0, 0x2}]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

22:02:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, &(0x7f00000002c0)="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"})

22:02:56 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x380, 0x30020000, 0x230, 0x0, 0x230, 0x230, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_to_hsr\x00'}, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bridge_slave_1\x00', {0x1, 0x0, 0x41, 0x0, 0x0, 0x5, 0x80000040, 0x20000003}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0)

22:02:56 executing program 1:
open(0x0, 0x0, 0xe9)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd909}, 0x100)

22:02:56 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1)
syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x2c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)

[  302.536666][ T9952] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  302.556687][ T9955] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  302.570986][ T9953] xt_CT: You must specify a L4 protocol and not use inversions on it
22:02:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x5d, 0x0)

22:02:56 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = memfd_create(0x0, 0x0)
r1 = creat(&(0x7f0000000480)='./bus/file0\x00', 0x81)
fallocate(r1, 0x0, 0x0, 0x2000002)
read$eventfd(r1, 0x0, 0x0)
fallocate(r0, 0x800000000000003, 0xfa9, 0x0)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r3 = msgget$private(0x0, 0x204)
msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/106)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1, 0x4, 0x4b7}, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000600)='syz_tun\x00', 0x10)
r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x800fe)
sendfile(r5, r8, 0x0, 0x8000fffffffe)

22:02:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2)

22:02:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2)

22:02:56 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1)
syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x2c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)

[  302.965517][ T9975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  303.070156][ T9987] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
22:02:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x5d, 0x0)

22:02:57 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @broadcast}, {0x0, 0x0, 0x0, @broadcast}}}}}, 0x0)

22:02:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x5d, 0x0)

22:02:57 executing program 4:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f00000008c0)=ANY=[@ANYBLOB='mode=0'])

22:02:57 executing program 4:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

22:02:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x0, @local}}, {{0x2, 0x0, @broadcast}}}, 0x104)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
setuid(0xee01)

22:02:57 executing program 0:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x3e0, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f0000000380)=""/157, 0x3e, 0x9d, 0x8}, 0x20)

[  303.806678][T10012] BPF:btf_header not found
22:02:57 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r1, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = dup3(r4, r5, 0x0)
dup2(r7, r6)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)

[  303.862228][T10020] BPF:btf_header not found
22:02:57 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x40, 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

22:02:57 executing program 1:
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:02:58 executing program 2:
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

22:02:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/arp\x00')
lseek(r0, 0x4, 0x0)

[  304.161615][T10045] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined.
22:02:58 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='size=05%'])

22:02:58 executing program 5:
prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='wlan0nod\xe5vnodevs_lf,\x00')
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x7)

22:02:58 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000077000)=""/133, 0x2800)

22:02:58 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48)

22:02:58 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r1, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = dup3(r4, r5, 0x0)
dup2(r7, r6)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)

22:02:58 executing program 0:
r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xe0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x20, 0x6, 0x5, 0x23, 0x0, 0xfffffffffffffc00, 0x134aefb433e358, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x350, 0x100000001, 0x4, 0x1, 0x4, 0xfffffff8, 0xbc}, 0xffffffffffffffff, 0xf, r0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc004240a, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fb5c03658ff533b2311d03bea04ef26993f0ca2b9b57e81033c771dbea8c663cd917ac7b5c9e4446f0be500795e3b7418aafe62ea8378192b513a51ca71bde9eaebc8b5501a6f1b37c2a63c1ad8d4152f97f300ace783df728dc48f6438dae36"], 0x5c, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5743b46c00a9c63a4b89e7a4e25df40682a030d3d51bf2cc65cea3acfa42e3719665ce28707f2e62e5685fa45f8d258d358b512c74add39bd41100a55ae5441e942c7019e63cbea8e0eb07fe76e9652675ab74703d337e"], 0x48}}, 0x0)
r7 = getpid()
tkill(r7, 0x9)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)

22:02:59 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

22:02:59 executing program 2:
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

22:02:59 executing program 4:
r0 = epoll_create1(0x0)
r1 = socket(0x28, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))

22:02:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[], 0x0, 0xffffffffffdce7bb})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  305.129525][   T27] audit: type=1804 audit(1580940179.174:35): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir900326847/syzkaller.hNy8s9/13/bus" dev="sda1" ino=16531 res=1
[  305.170092][T10108] BPF:[1] ARRAY (anon) 
[  305.200068][T10111] BPF:[1] ARRAY (anon) 
[  305.248188][T10117] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  305.278201][T10108] BPF:type_id=1 index_type_id=3 nr_elems=0
[  305.284812][   T27] audit: type=1804 audit(1580940179.224:36): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir900326847/syzkaller.hNy8s9/13/bus" dev="sda1" ino=16531 res=1
[  305.313140][T10111] BPF:type_id=1 index_type_id=3 nr_elems=0
[  305.332705][T10108] BPF: 
22:02:59 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  305.350490][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  305.364607][T10108] BPF:Invalid index
[  305.380034][T10108] BPF:
[  305.380034][T10108] 
[  305.383749][T10111] BPF: 
22:02:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x50000}, 0x0)

[  305.407987][T10111] BPF:Invalid index
[  305.446250][T10111] BPF:
[  305.446250][T10111] 
[  305.483238][T10117] device gretap0 entered promiscuous mode
[  305.489370][T10117] device macvlan2 entered promiscuous mode
[  305.598987][T10117] device gretap0 left promiscuous mode
[  305.603683][T10133] BPF:[1] FUNC_PROTO (anon) 
[  305.617520][T10133] BPF:return=2 args=(
[  305.659436][T10134] BPF:[1] FUNC_PROTO (anon) 
22:02:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x50000}, 0x0)

22:02:59 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  305.689426][T10133] BPF:void
[  305.700775][T10134] BPF:return=2 args=(
[  305.702193][T10133] BPF:)
[  305.707744][T10133] BPF: 
[  305.712090][T10133] BPF:Invalid return type
[  305.716590][T10133] BPF:
[  305.716590][T10133] 
22:02:59 executing program 3:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, &(0x7f0000000380)=""/157, 0x3e, 0x9d, 0x8}, 0x20)

[  305.770019][T10134] BPF:void
22:02:59 executing program 5:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  305.841396][T10134] BPF:)
[  305.909687][T10134] BPF: 
[  305.910131][T10148] BPF:[2] ARRAY (anon) 
[  305.931055][T10134] BPF:Invalid return type
[  305.935705][T10152] BPF:[2] ARRAY (anon) 
[  305.941018][T10148] BPF:type_id=1 index_type_id=1 nr_elems=0
[  305.978742][T10152] BPF:type_id=1 index_type_id=1 nr_elems=0
[  306.001139][T10134] BPF:
[  306.001139][T10134] 
[  306.022314][T10148] BPF: 
22:03:00 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x1, 0x0, 0x4000000)

[  306.036661][T10152] BPF: 
[  306.058044][T10148] BPF:Invalid index
[  306.058062][T10157] BPF:[1] FUNC_PROTO (anon) 
[  306.082730][T10152] BPF:Invalid index
[  306.100911][T10152] BPF:
[  306.100911][T10152] 
[  306.111790][T10148] BPF:
[  306.111790][T10148] 
[  306.142990][T10157] BPF:return=2 args=(
[  306.170688][T10157] BPF:void
[  306.178760][T10157] BPF:)
[  306.205423][T10157] BPF: 
[  306.225480][T10157] BPF:Invalid return type
[  306.240839][T10157] BPF:
[  306.240839][T10157] 
[  306.367054][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.378003][T10155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.392431][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.400019][T10155] batman_adv: batadv0: Removing interface: batadv_slave_1
22:03:00 executing program 0:
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(0x0, 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:00 executing program 1:
unshare(0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x21a, 0x0, 0x59, 0x0, 0x1d7}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cgroup\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

22:03:00 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
syz_genetlink_get_family_id$fou(0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

22:03:00 executing program 3:
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:00 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  306.992055][T10180] BPF:[1] FUNC_PROTO (anon) 
[  307.043921][T10180] BPF:return=2 args=(
[  307.084755][T10180] BPF:void
22:03:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}}, 0x14}, 0x1, 0x50000}, 0x0)

22:03:01 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  307.114534][T10180] BPF:)
[  307.129971][T10180] BPF: 
[  307.142900][T10180] BPF:Invalid return type
[  307.149669][T10180] BPF:
[  307.149669][T10180] 
[  307.337407][T10200] BPF:[1] FUNC_PROTO (anon) 
[  307.349728][T10200] BPF:return=2 args=(
[  307.369932][T10200] BPF:void
[  307.379701][T10200] BPF:)
[  307.398782][T10200] BPF: 
[  307.408860][T10200] BPF:Invalid return type
22:03:01 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
socket$inet6(0xa, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000240))

[  307.547444][T10200] BPF:
[  307.547444][T10200] 
22:03:01 executing program 0:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
acct(0x0)

22:03:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  307.938397][T10224] BPF:[1] FUNC_PROTO (anon) 
[  307.972713][T10224] BPF:return=2 args=(
[  307.976740][T10224] BPF:void
[  307.979768][T10224] BPF:)
[  308.102177][T10224] BPF: 
[  308.157989][T10224] BPF:Invalid return type
[  308.200656][T10224] BPF:
[  308.200656][T10224] 
22:03:02 executing program 3:
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:02 executing program 0:
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
socket$inet6(0xa, 0x0, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x5}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d7", 0x16}], 0x2}}], 0x1, 0x0)

22:03:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

22:03:02 executing program 5:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

22:03:02 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
syz_genetlink_get_family_id$fou(0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

[  308.384826][T10236] BPF:[1] FUNC_PROTO (anon) 
[  308.416088][T10236] BPF:return=2 args=(
[  308.422324][T10236] BPF:void
[  308.425551][T10236] BPF:)
[  308.428473][T10236] BPF: 
[  308.431765][T10236] BPF:Invalid return type
[  308.436240][T10236] BPF:
[  308.436240][T10236] 
22:03:02 executing program 1:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

22:03:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  308.750388][T10255] BPF:[1] FUNC_PROTO (anon) 
[  308.789331][T10255] BPF:return=2 args=(
[  308.813976][T10255] BPF:void
[  308.831659][T10255] BPF:)
[  308.848486][T10255] BPF: 
[  308.856906][T10255] BPF:Invalid return type
[  308.870354][T10255] BPF:
[  308.870354][T10255] 
22:03:03 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  309.048813][T10261] BPF:[1] FUNC_PROTO (anon) 
[  309.059366][T10261] BPF:return=2 args=(
[  309.063865][T10261] BPF:void
[  309.067104][T10261] BPF:)
[  309.069880][T10261] BPF: 
[  309.078149][T10261] BPF:Invalid return type
[  309.085234][T10261] BPF:
[  309.085234][T10261] 
22:03:03 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

22:03:03 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

[  309.288749][T10269] BPF:[1] FUNC_PROTO (anon) 
[  309.299792][T10269] BPF:return=2 args=(
[  309.307556][T10269] BPF:void
[  309.325931][T10269] BPF:)
[  309.328864][T10269] BPF: 
[  309.345515][T10269] BPF:Invalid return type
[  309.350147][T10269] BPF:
[  309.350147][T10269] 
22:03:03 executing program 4:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d, 0x8}, 0x20)

[  309.514221][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.529363][T10252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.598628][T10280] BPF:[1] FUNC_PROTO (anon) 
[  309.615038][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.629193][T10280] BPF:return=2 args=(
[  309.638967][T10252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.642911][T10280] BPF:void
[  309.658847][T10280] BPF:)
[  309.661831][T10280] BPF: 
[  309.664888][T10280] BPF:Invalid return type
[  309.669548][T10280] BPF:
[  309.669548][T10280] 
22:03:03 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:03:04 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:03:04 executing program 5:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

22:03:04 executing program 0:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x4, 0x0)
write$P9_RWSTAT(r0, &(0x7f0000000340)={0x7}, 0x7)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000380)={[0x2000, 0x3000, 0x2, 0x2], 0x4, 0x78, 0x5})
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)

22:03:04 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:04 executing program 2:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

[  310.802863][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.814903][T10301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.855498][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.910480][T10301] batman_adv: batadv0: Removing interface: batadv_slave_1
22:03:05 executing program 1:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
memfd_create(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
io_submit(0x0, 0x0, 0x0)

22:03:05 executing program 5:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

22:03:05 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:03:05 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=""/157, 0x0, 0x9d, 0x8}, 0x20)

22:03:05 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

[  311.675269][T10317] BPF:hdr_len not found
22:03:05 executing program 2:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:05 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=""/157, 0x0, 0x9d, 0x8}, 0x20)

[  311.961210][T10331] BPF:hdr_len not found
22:03:06 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=""/157, 0x0, 0x9d, 0x8}, 0x20)

[  312.288600][T10338] BPF:hdr_len not found
22:03:06 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20)

[  312.574782][T10345] BPF:[1] FUNC_PROTO (anon) 
[  312.610206][T10345] BPF:return=2 args=(
[  312.637783][T10345] BPF:void
[  312.650163][T10345] BPF:)
[  312.667935][T10345] BPF: 
[  312.692019][T10345] BPF:Invalid return type
[  312.724857][T10345] BPF:
[  312.724857][T10345] 
22:03:08 executing program 0:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:08 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20)

22:03:08 executing program 3:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(r2, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

[  314.182024][T10353] BPF:[1] FUNC_PROTO (anon) 
[  314.186678][T10353] BPF:return=2 args=(
[  314.210665][T10353] BPF:void
[  314.213892][T10353] BPF:)
[  314.216881][T10353] BPF: 
[  314.219648][T10353] BPF:Invalid return type
[  314.230909][T10353] BPF:
[  314.230909][T10353] 
22:03:08 executing program 1:
unshare(0x24020400)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x3}, 0x18)
ioctl(r0, 0x8916, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
r2 = socket(0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="73917b05be507515ca49dab8e83305c1"}, 0x1c)
ioctl(r0, 0x8936, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)

[  315.182637][T10363] IPVS: ftp: loaded support on port[0] = 21
[  315.247252][T10363] chnl_net:caif_netlink_parms(): no params data found
[  315.286907][T10363] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.294288][T10363] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.303223][T10363] device bridge_slave_0 entered promiscuous mode
[  315.312638][T10363] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.319795][T10363] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.328072][T10363] device bridge_slave_1 entered promiscuous mode
[  315.348500][T10363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.360163][T10363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.387385][T10363] team0: Port device team_slave_0 added
[  315.423879][T10363] team0: Port device team_slave_1 added
[  315.528184][T10363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.540118][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.591692][  T320] tipc: TX() has been purged, node left!
[  315.635614][T10363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.276291][T10363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.296148][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.366028][T10363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.488478][T10363] device hsr_slave_0 entered promiscuous mode
[  316.525763][T10363] device hsr_slave_1 entered promiscuous mode
[  316.586289][T10363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.605019][T10363] Cannot create hsr debugfs directory
[  317.010784][    C0] 
[  317.013162][    C0] ================================
[  317.018351][    C0] WARNING: inconsistent lock state
[  317.023584][    C0] 5.5.0-rc6-next-20200116-syzkaller #0 Not tainted
[  317.030094][    C0] --------------------------------
[  317.035214][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  317.042068][    C0] ps/10385 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  317.047883][    C0] ffffffff8a03ce58 (ima_keys_lock){+.?.}, at: ima_process_queued_keys+0x4f/0x320
[  317.058288][    C0] {SOFTIRQ-ON-W} state was registered at:
[  317.064311][    C0]   lock_acquire+0x190/0x410
[  317.069008][    C0]   _raw_spin_lock+0x2f/0x40
[  317.073790][    C0]   ima_post_key_create_or_update+0x234/0x470
[  317.079963][    C0]   key_create_or_update+0x6b8/0xcb0
[  317.085349][    C0]   load_system_certificate_list+0x1ba/0x25e
[  317.091410][    C0]   do_one_initcall+0x120/0x820
[  317.096322][    C0]   kernel_init_freeable+0x522/0x5d0
[  317.101652][    C0]   kernel_init+0x12/0x1bf
[  317.106087][    C0]   ret_from_fork+0x24/0x30
[  317.110590][    C0] irq event stamp: 66054
[  317.114846][    C0] hardirqs last  enabled at (66054): [<ffffffff87ee0813>] _raw_spin_unlock_irq+0x23/0x80
[  317.124779][    C0] hardirqs last disabled at (66053): [<ffffffff87ee09fa>] _raw_spin_lock_irq+0x3a/0x80
[  317.134609][    C0] softirqs last  enabled at (65644): [<ffffffff882006cd>] __do_softirq+0x6cd/0x98c
[  317.143967][    C0] softirqs last disabled at (66051): [<ffffffff8147a05b>] irq_exit+0x19b/0x1e0
[  317.152910][    C0] 
[  317.152910][    C0] other info that might help us debug this:
[  317.160982][    C0]  Possible unsafe locking scenario:
[  317.160982][    C0] 
[  317.168523][    C0]        CPU0
[  317.171804][    C0]        ----
[  317.175168][    C0]   lock(ima_keys_lock);
[  317.179406][    C0]   <Interrupt>
[  317.182861][    C0]     lock(ima_keys_lock);
[  317.187278][    C0] 
[  317.187278][    C0]  *** DEADLOCK ***
[  317.187278][    C0] 
[  317.195432][    C0] 2 locks held by ps/10385:
[  317.199946][    C0]  #0: ffffffff8a01bbe8 (tomoyo_ss){....}, at: tomoyo_check_open_permission+0xfe/0x3e0
[  317.209652][    C0]  #1: ffffc90000007d50 ((&ima_key_queue_timer)){+.-.}, at: call_timer_fn+0xe0/0x780
[  317.219179][    C0] 
[  317.219179][    C0] stack backtrace:
[  317.225079][    C0] CPU: 0 PID: 10385 Comm: ps Not tainted 5.5.0-rc6-next-20200116-syzkaller #0
[  317.233923][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  317.244007][    C0] Call Trace:
[  317.247288][    C0]  <IRQ>
[  317.250226][    C0]  dump_stack+0x197/0x210
[  317.254621][    C0]  print_usage_bug.cold+0x327/0x378
[  317.259953][    C0]  mark_lock+0xbb4/0x1220
[  317.264296][    C0]  ? check_usage_backwards+0x330/0x330
[  317.269768][    C0]  __lock_acquire+0x1e8e/0x4a00
[  317.274637][    C0]  ? alloc_list_entry+0xc0/0xc0
[  317.279563][    C0]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  317.286167][    C0]  ? find_first_zero_bit+0x9a/0xc0
[  317.291425][    C0]  ? mark_held_locks+0xf0/0xf0
[  317.296181][    C0]  lock_acquire+0x190/0x410
[  317.300690][    C0]  ? ima_process_queued_keys+0x4f/0x320
[  317.306339][    C0]  _raw_spin_lock+0x2f/0x40
[  317.310928][    C0]  ? ima_process_queued_keys+0x4f/0x320
[  317.316455][    C0]  ima_process_queued_keys+0x4f/0x320
[  317.321997][    C0]  ima_timer_handler+0x15/0x20
[  317.326784][    C0]  call_timer_fn+0x1ac/0x780
[  317.331450][    C0]  ? ima_process_queued_keys+0x320/0x320
[  317.337181][    C0]  ? msleep_interruptible+0x150/0x150
[  317.342549][    C0]  ? run_timer_softirq+0x6b1/0x1790
[  317.347785][    C0]  ? trace_hardirqs_on+0x67/0x240
[  317.352811][    C0]  ? ima_process_queued_keys+0x320/0x320
[  317.358425][    C0]  ? ima_process_queued_keys+0x320/0x320
[  317.364058][    C0]  run_timer_softirq+0x6c3/0x1790
[  317.369066][    C0]  ? add_timer+0x930/0x930
[  317.373589][    C0]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[  317.379867][    C0]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  317.385555][    C0]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  317.391537][    C0]  ? trace_hardirqs_on+0x67/0x240
[  317.396548][    C0]  __do_softirq+0x262/0x98c
[  317.401406][    C0]  ? sched_clock_cpu+0x1b/0x1b0
[  317.406272][    C0]  irq_exit+0x19b/0x1e0
[  317.410542][    C0]  smp_apic_timer_interrupt+0x1a3/0x610
[  317.416079][    C0]  apic_timer_interrupt+0xf/0x20
[  317.421000][    C0]  </IRQ>
[  317.423937][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50
[  317.430000][    C0] Code: ff cc cc cc cc cc cc cc cc cc 65 48 8b 04 25 c0 1e 02 00 48 8b 80 a0 13 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 65 48 8b 04 25 c0 1e 02 00 65 8b 15 a4 86 8c 7e 81 e2
[  317.449607][    C0] RSP: 0018:ffffc90001697438 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  317.458013][    C0] RAX: 0000000000000000 RBX: 0000000000000010 RCX: ffffffff83697fb5
[  317.466065][    C0] RDX: 0000000000000010 RSI: 0000000000000010 RDI: 0000000000000001
[  317.474030][    C0] RBP: ffffc90001697480 R08: ffff88804d6c0240 R09: fffffbfff17464f1
[  317.482100][    C0] R10: fffffbfff17464f0 R11: ffffffff8ba32787 R12: ffff888093a8d000
[  317.490072][    C0] R13: 0000000000000002 R14: 0000000000000169 R15: 0000000000000000
[  317.498095][    C0]  ? tomoyo_domain_quota_is_ok+0x335/0x540
[  317.503929][    C0]  ? tomoyo_domain_quota_is_ok+0xe9/0x540
[  317.509635][    C0]  tomoyo_supervisor+0x286/0xe60
[  317.514555][    C0]  ? tomoyo_update_stat+0x80/0x80
[  317.519850][    C0]  ? rwlock_bug.part.0+0x90/0x90
[  317.524792][    C0]  ? trace_hardirqs_off+0x62/0x240
[  317.529892][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  317.536222][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  317.542468][    C0]  ? tomoyo_check_path_acl+0x91/0x130
[  317.547939][    C0]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  317.558479][    C0]  ? tomoyo_check_acl+0x229/0x3e0
[  317.563866][    C0]  tomoyo_path_permission+0x263/0x360
[  317.569242][    C0]  ? tomoyo_fill_path_info+0x23c/0x430
[  317.574696][    C0]  tomoyo_check_open_permission+0x3a6/0x3e0
[  317.581213][    C0]  ? enable_cpucache.cold+0x2/0x1e
[  317.586875][    C0]  ? tomoyo_path_number_perm+0x520/0x520
[  317.593235][    C0]  ? __kasan_check_read+0x11/0x20
[  317.598359][    C0]  ? lock_downgrade+0x920/0x920
[  317.603395][    C0]  ? rwlock_bug.part.0+0x90/0x90
[  317.608753][    C0]  tomoyo_file_open+0xa9/0xd0
[  317.613477][    C0]  security_file_open+0x71/0x300
[  317.618966][    C0]  do_dentry_open+0x365/0x1350
[  317.623754][    C0]  ? lock_downgrade+0x920/0x920
[  317.629572][    C0]  ? chown_common+0x5c0/0x5c0
[  317.636113][    C0]  ? inode_permission+0xb4/0x520
[  317.641156][    C0]  vfs_open+0xa0/0xd0
[  317.645151][    C0]  path_openat+0x12fd/0x34d0
[  317.649766][    C0]  ? path_mountpoint.isra.0+0x370/0x370
[  317.656035][    C0]  ? __alloc_fd+0x487/0x620
[  317.661276][    C0]  do_filp_open+0x192/0x260
[  317.666393][    C0]  ? may_open_dev+0x100/0x100
[  317.671444][    C0]  ? do_raw_spin_unlock+0x181/0x270
[  317.676776][    C0]  ? _raw_spin_unlock+0x28/0x40
[  317.681635][    C0]  do_sys_openat2+0x633/0x840
[  317.686653][    C0]  ? file_open_root+0x5f0/0x5f0
[  317.691612][    C0]  ? lock_downgrade+0x920/0x920
[  317.696811][    C0]  ? blkcg_maybe_throttle_current+0x5ca/0xfc0
[  317.702933][    C0]  do_sys_open+0xfc/0x190
[  317.707344][    C0]  ? filp_open+0x80/0x80
[  317.711591][    C0]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  317.717469][    C0]  ? do_syscall_64+0x26/0x790
[  317.722236][    C0]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  317.728689][    C0]  ? do_syscall_64+0x26/0x790
[  317.733459][    C0]  __x64_sys_open+0x7e/0xc0
[  317.738829][    C0]  do_syscall_64+0xfa/0x790
[  317.743552][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  317.749758][    C0] RIP: 0033:0x7fd269dfc120
[  317.754246][    C0] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
[  317.774011][    C0] RSP: 002b:00007fffc16b1b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  317.782513][    C0] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007fd269dfc120
[  317.790789][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fd26a2cad00
[  317.798802][    C0] RBP: 0000000000001000 R08: 0000000000000000 R09: 00007fd26a0c457b
[  317.806791][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd26a2c9d00
[  317.814774][    C0] R13: 0000000000000020 R14: 0000000000000005 R15: 0000000000000000
[  317.927412][T10363] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.946104][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  317.954162][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  317.968815][T10363] 8021q: adding VLAN 0 to HW filter on device team0
[  317.982804][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  317.991997][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  318.000347][ T2707] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.007620][ T2707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.017056][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  318.025874][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  318.034739][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  318.043369][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.050617][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.099897][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  318.109535][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  318.121967][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  318.130481][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  318.139325][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  318.150813][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  318.159355][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  318.171724][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  318.180310][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  318.192274][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  318.200987][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  318.211584][T10363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  318.230133][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  318.237867][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  318.251177][T10363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.321682][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  318.330419][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  318.350717][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  318.359068][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  318.368804][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.376585][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  318.386399][T10363] device veth0_vlan entered promiscuous mode
[  318.399305][T10363] device veth1_vlan entered promiscuous mode
[  318.423059][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  318.431791][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  318.439863][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  318.450367][T10363] device veth0_macvtap entered promiscuous mode
[  318.461499][T10363] device veth1_macvtap entered promiscuous mode
[  318.478177][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  318.489095][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.499622][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  318.510136][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.520043][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  318.531187][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.543280][T10363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.552991][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  318.561371][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  318.570022][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  318.580847][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  318.595741][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.606300][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  318.617418][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.627611][T10363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  318.638097][T10363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.649558][T10363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.687228][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  318.696268][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  318.936604][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.945260][T10404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.955502][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.963334][T10404] batman_adv: batadv0: Removing interface: batadv_slave_1
22:03:13 executing program 5:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

22:03:13 executing program 2:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:13 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20)

22:03:13 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
socket$inet6(0xa, 0x0, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

22:03:13 executing program 0:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:13 executing program 1:
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1", 0x10}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x2}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000240))

[  319.415153][T10410] BPF:[1] FUNC_PROTO (anon) 
[  319.436229][T10410] BPF:return=2 args=(
[  319.453887][T10410] BPF:void
[  319.460917][T10410] BPF:)
[  319.467212][T10410] BPF: 
[  319.474362][T10410] BPF:Invalid return type
[  319.481859][T10410] BPF:
[  319.481859][T10410] 
22:03:13 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20)

22:03:13 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20)

22:03:13 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/157, 0x26, 0x9d, 0x8}, 0x20)

22:03:13 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x8}, 0x20)

22:03:14 executing program 2:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:14 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x8}, 0x20)

22:03:14 executing program 5:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

22:03:14 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x8}, 0x20)

22:03:14 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
socket$inet6(0xa, 0x0, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

22:03:14 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d}, 0x20)

[  320.352542][  T320] device bridge_slave_1 left promiscuous mode
[  320.363977][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.452806][  T320] device bridge_slave_0 left promiscuous mode
[  320.461346][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.524176][  T320] device veth1_macvtap left promiscuous mode
[  320.535733][  T320] device veth0_macvtap left promiscuous mode
[  320.549745][  T320] device veth1_vlan left promiscuous mode
[  320.573365][  T320] device veth0_vlan left promiscuous mode
[  322.303058][  T320] device hsr_slave_0 left promiscuous mode
[  322.350676][  T320] device hsr_slave_1 left promiscuous mode
[  322.400875][  T320] team0 (unregistering): Port device team_slave_1 removed
[  322.412027][  T320] team0 (unregistering): Port device team_slave_0 removed
[  322.422702][  T320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.454111][  T320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.555260][  T320] bond0 (unregistering): Released all slaves
[  322.705244][T10468] IPVS: ftp: loaded support on port[0] = 21
[  322.705261][T10470] IPVS: ftp: loaded support on port[0] = 21
[  322.780084][T10468] chnl_net:caif_netlink_parms(): no params data found
[  322.823551][T10470] chnl_net:caif_netlink_parms(): no params data found
[  322.842040][T10468] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.849182][T10468] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.859006][T10468] device bridge_slave_0 entered promiscuous mode
[  322.870069][T10468] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.877333][T10468] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.885207][T10468] device bridge_slave_1 entered promiscuous mode
[  322.907209][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.930334][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.955097][T10468] team0: Port device team_slave_0 added
[  322.967190][T10468] team0: Port device team_slave_1 added
[  322.983987][T10470] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.991223][T10470] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.999069][T10470] device bridge_slave_0 entered promiscuous mode
[  323.007447][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.017310][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.043330][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.054258][T10470] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.061750][T10470] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.069377][T10470] device bridge_slave_1 entered promiscuous mode
[  323.077591][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.084601][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.112847][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.137782][T10470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.153570][T10470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.212913][T10468] device hsr_slave_0 entered promiscuous mode
[  323.251290][T10468] device hsr_slave_1 entered promiscuous mode
[  323.291637][T10468] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  323.299594][T10468] Cannot create hsr debugfs directory
[  323.319112][T10470] team0: Port device team_slave_0 added
[  323.330004][T10470] team0: Port device team_slave_1 added
[  323.352011][T10470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.359343][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.385924][T10470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.402440][T10470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.409483][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.411626][    T0] NOHZ: local_softirq_pending 08
[  323.436344][T10470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.502721][T10470] device hsr_slave_0 entered promiscuous mode
[  323.540935][T10470] device hsr_slave_1 entered promiscuous mode
[  323.580663][T10470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  323.588251][T10470] Cannot create hsr debugfs directory
[  323.645921][T10468] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.653799][T10468] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.661176][T10468] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.668293][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.700390][T10470] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.707501][T10470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.714838][T10470] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.721957][T10470] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.734225][ T2713] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.742193][ T2713] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.751371][ T2713] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.759143][ T2713] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.800789][T10468] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.821264][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  323.828937][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.845205][T10468] 8021q: adding VLAN 0 to HW filter on device team0
[  323.857355][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  323.867315][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  323.875860][T10395] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.882978][T10395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.900181][T10470] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.908370][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  323.917056][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  323.925836][T10395] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.932928][T10395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.950313][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  323.959322][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  323.968133][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  323.976544][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.989404][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  323.999604][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  324.010131][T10470] 8021q: adding VLAN 0 to HW filter on device team0
[  324.026986][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  324.035109][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  324.043885][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  324.053904][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  324.062668][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  324.077756][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  324.087000][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  324.095649][T10395] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.102919][T10395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.111438][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  324.119889][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  324.128583][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  324.137496][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  324.145885][T10395] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.152975][T10395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.161793][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  324.176252][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  324.192774][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  324.202723][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  324.212091][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  324.222415][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  324.235523][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  324.244613][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  324.262627][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  324.271193][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  324.279512][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  324.288112][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  324.299019][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  324.309165][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  324.323699][T10468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.331761][T10470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  324.358133][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  324.366940][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  324.382880][T10470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.407485][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  324.416302][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  324.446927][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  324.456636][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  324.465671][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  324.474236][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  324.485932][T10468] device veth0_vlan entered promiscuous mode
[  324.502830][T10468] device veth1_vlan entered promiscuous mode
[  324.516064][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  324.524629][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  324.533613][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  324.542423][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  324.570161][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  324.580345][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  324.593638][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  324.602491][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  324.611342][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  324.619164][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  324.627606][T10468] device veth0_macvtap entered promiscuous mode
[  324.638851][T10470] device veth0_vlan entered promiscuous mode
[  324.647637][T10468] device veth1_macvtap entered promiscuous mode
[  324.664117][T10470] device veth1_vlan entered promiscuous mode
[  324.675735][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  324.686445][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.696858][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  324.707535][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.717818][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  324.728417][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.739170][T10468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.749980][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  324.758832][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  324.766723][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  324.774910][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  324.783094][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  324.792002][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  324.803767][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  324.814998][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.825464][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  324.836537][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.846399][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  324.857363][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.868271][T10468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.878902][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  324.888450][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.944442][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  324.953033][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  325.012321][T10470] device veth0_macvtap entered promiscuous mode
[  325.023839][T10470] device veth1_macvtap entered promiscuous mode
[  325.041182][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  325.051699][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.062862][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  325.079695][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.089944][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  325.101172][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.111285][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  325.122056][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.133390][T10470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.145226][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  325.154480][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  325.162698][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  325.171485][ T3238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  325.185766][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  325.196636][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.207550][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  325.218182][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.228078][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  325.238524][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.248475][T10470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  325.260175][T10470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.271203][T10470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.284070][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  325.292724][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
22:03:19 executing program 0:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x10002)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000340)={0x7}, 0x7)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x2, {0x1, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

22:03:19 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d}, 0x20)

22:03:19 executing program 5:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x0, {0x0, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)

22:03:19 executing program 2:
creat(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet_udplite(0x2, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES16])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
creat(&(0x7f0000000700)='./bus\x00', 0x110)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = dup3(r5, r6, 0x0)
dup2(r8, r7)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)

22:03:19 executing program 1:
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1", 0x10}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x2}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000240))

22:03:19 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
socket$inet6(0xa, 0x0, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54)

22:03:19 executing program 4:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto]}}, &(0x7f0000000380)=""/157, 0x32, 0x9d}, 0x20)

22:03:20 executing program 4:

[  326.030407][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.089932][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0
22:03:20 executing program 4:

[  326.130436][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.159123][T10519] batman_adv: batadv0: Removing interface: batadv_slave_1
22:03:20 executing program 4:

22:03:20 executing program 4:

22:03:20 executing program 2:

22:03:21 executing program 0:
msgget$private(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x10002)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000340)={0x7}, 0x7)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x2, {0x1, 0x1}}, 0x14)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

22:03:21 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
flock(0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x31000}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)
shmget(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x0)
socket$inet6(0xa, 0x0, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="5531f5e79d1230ddde98e2f96ff18ba1390fc35e67d75c5a", 0x18}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e101b8da27a3185d39bb2", 0x34}], 0x3}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000240)=0x54)