[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.938050][ T26] audit: type=1800 audit(1581162250.592:25): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 85.958003][ T26] audit: type=1800 audit(1581162250.592:26): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.013977][ T26] audit: type=1800 audit(1581162250.602:27): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. 2020/02/08 11:44:21 fuzzer started 2020/02/08 11:44:22 dialing manager at 10.128.0.26:35407 2020/02/08 11:44:22 syscalls: 2943 2020/02/08 11:44:22 code coverage: enabled 2020/02/08 11:44:22 comparison tracing: enabled 2020/02/08 11:44:22 extra coverage: enabled 2020/02/08 11:44:22 setuid sandbox: enabled 2020/02/08 11:44:22 namespace sandbox: enabled 2020/02/08 11:44:22 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/08 11:44:22 fault injection: enabled 2020/02/08 11:44:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/08 11:44:22 net packet injection: enabled 2020/02/08 11:44:22 net device setup: enabled 2020/02/08 11:44:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/08 11:44:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:44:23 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 11:44:24 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) socket(0x0, 0x800000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0) syzkaller login: [ 99.386632][ T9564] IPVS: ftp: loaded support on port[0] = 21 [ 99.541871][ T9564] chnl_net:caif_netlink_parms(): no params data found 11:44:24 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070700be0000090007010a00001e00", 0x15) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 99.666063][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.673350][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.683010][ T9568] IPVS: ftp: loaded support on port[0] = 21 [ 99.690186][ T9564] device bridge_slave_0 entered promiscuous mode [ 99.711659][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.718877][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.726896][ T9564] device bridge_slave_1 entered promiscuous mode [ 99.754617][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.767426][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.793148][ T9564] team0: Port device team_slave_0 added [ 99.805030][ T9564] team0: Port device team_slave_1 added [ 99.830947][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.838049][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.864251][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.877562][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.884514][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.911653][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.983956][ T9571] IPVS: ftp: loaded support on port[0] = 21 11:44:24 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) [ 100.039620][ T9564] device hsr_slave_0 entered promiscuous mode [ 100.096459][ T9564] device hsr_slave_1 entered promiscuous mode [ 100.196840][ T9568] chnl_net:caif_netlink_parms(): no params data found [ 100.305680][ T9575] IPVS: ftp: loaded support on port[0] = 21 11:44:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) syz_read_part_table(0x5745568200000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="020005000000000e091400000000000000000f00000000000000000005000000", 0x20, 0x1c0}]) [ 100.449011][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.459056][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.475563][ T9568] device bridge_slave_0 entered promiscuous mode [ 100.519805][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.534798][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.542681][ T9568] device bridge_slave_1 entered promiscuous mode [ 100.550924][ T9571] chnl_net:caif_netlink_parms(): no params data found [ 100.653314][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 11:44:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) [ 100.696432][ T9580] IPVS: ftp: loaded support on port[0] = 21 [ 100.728913][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.738684][ T9564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.841516][ T9564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.908811][ T9564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.991735][ T9575] chnl_net:caif_netlink_parms(): no params data found [ 101.005600][ T9564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.056004][ T9571] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.063074][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.073067][ T9571] device bridge_slave_0 entered promiscuous mode [ 101.081270][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.088447][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.096702][ T9571] device bridge_slave_1 entered promiscuous mode [ 101.107843][ T9568] team0: Port device team_slave_0 added [ 101.131141][ T9584] IPVS: ftp: loaded support on port[0] = 21 [ 101.147459][ T9568] team0: Port device team_slave_1 added [ 101.190543][ T9571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.201875][ T9571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.247822][ T9571] team0: Port device team_slave_0 added [ 101.263985][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.273284][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.299332][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.313149][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.320625][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.348108][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.360594][ T9571] team0: Port device team_slave_1 added [ 101.375135][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.382289][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.390152][ T9575] device bridge_slave_0 entered promiscuous mode [ 101.400053][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.407261][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.414923][ T9575] device bridge_slave_1 entered promiscuous mode [ 101.441211][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.448480][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.474448][ T9571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.491067][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.498106][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.524099][ T9571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.549307][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.564812][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.677561][ T9568] device hsr_slave_0 entered promiscuous mode [ 101.735090][ T9568] device hsr_slave_1 entered promiscuous mode [ 101.784960][ T9568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.792660][ T9568] Cannot create hsr debugfs directory [ 101.803907][ T9575] team0: Port device team_slave_0 added [ 101.811784][ T9575] team0: Port device team_slave_1 added [ 101.896357][ T9571] device hsr_slave_0 entered promiscuous mode [ 101.934877][ T9571] device hsr_slave_1 entered promiscuous mode [ 101.984872][ T9571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.992421][ T9571] Cannot create hsr debugfs directory [ 101.998244][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.005845][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.032051][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.049239][ T9580] chnl_net:caif_netlink_parms(): no params data found [ 102.076176][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.083128][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.109180][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.198676][ T9575] device hsr_slave_0 entered promiscuous mode [ 102.265049][ T9575] device hsr_slave_1 entered promiscuous mode [ 102.314807][ T9575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.322399][ T9575] Cannot create hsr debugfs directory [ 102.404074][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.411313][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.419092][ T9580] device bridge_slave_0 entered promiscuous mode [ 102.431300][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.439348][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.447196][ T9580] device bridge_slave_1 entered promiscuous mode [ 102.467556][ T9584] chnl_net:caif_netlink_parms(): no params data found [ 102.554460][ T9580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.593883][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.601191][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.608955][ T9584] device bridge_slave_0 entered promiscuous mode [ 102.618490][ T9580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.640810][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.647998][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.656183][ T9584] device bridge_slave_1 entered promiscuous mode [ 102.688821][ T9568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.777130][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.789833][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.798081][ T9568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.868794][ T9580] team0: Port device team_slave_0 added [ 102.874910][ T9568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.923575][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.941014][ T9580] team0: Port device team_slave_1 added [ 102.947015][ T9568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.033090][ T9584] team0: Port device team_slave_0 added [ 103.040144][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.049592][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.063979][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.081753][ T9584] team0: Port device team_slave_1 added [ 103.092797][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.100334][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.126472][ T9580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.138936][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.147648][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.156542][ T3251] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.163674][ T3251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.175814][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.197720][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.206841][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.215251][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.222289][ T3112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.229977][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.238952][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.248400][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.255940][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.281932][ T9580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.298395][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.306055][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.331993][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.344472][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.351595][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.377935][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.426807][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.443496][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.452445][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.465024][ T9571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.517174][ T9575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.556587][ T9575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.627079][ T9571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.677938][ T9571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.716298][ T9575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.767779][ T9575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.867860][ T9584] device hsr_slave_0 entered promiscuous mode [ 103.945069][ T9584] device hsr_slave_1 entered promiscuous mode [ 103.984825][ T9584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.992381][ T9584] Cannot create hsr debugfs directory [ 104.016462][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.025167][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.033849][ T9571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.147631][ T9580] device hsr_slave_0 entered promiscuous mode [ 104.195081][ T9580] device hsr_slave_1 entered promiscuous mode [ 104.234835][ T9580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.242399][ T9580] Cannot create hsr debugfs directory [ 104.296984][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.308407][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.317753][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.326388][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.346529][ T9564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.422513][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.430213][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.453442][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.474461][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.527218][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.534052][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.542153][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.585433][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.593930][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.604621][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.611718][ T3112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.619399][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.628848][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.637228][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.644247][ T3112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.652444][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.693599][ T9571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.704510][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.715325][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.724443][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.733143][ T9580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.788911][ T9580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.861285][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.884782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.893444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.902301][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.914990][ T9580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.982044][ T9580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.052066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.060229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.068889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.087162][ T9571] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.108086][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.122809][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.131806][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.139711][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.147786][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.155776][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.164606][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.172391][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.182345][ T9584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.246418][ T9564] device veth0_vlan entered promiscuous mode [ 105.252961][ T9584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.309242][ T9575] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.323496][ T9568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.334230][ T9568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.362719][ T9584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.402959][ T9584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.445948][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.454164][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.462526][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.470680][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.478995][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.487534][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.496001][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.503030][ T3112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.510651][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.519353][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.527740][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.534818][ T3112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.546973][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.554525][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.562441][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.570738][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.579455][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.588872][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.595967][ T3112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.618676][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.627185][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.638591][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.645684][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.696517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.705643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.714118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.724513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.733060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.741881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.755779][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.776411][ T9564] device veth1_vlan entered promiscuous mode [ 105.795130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.803105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.811059][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.819534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.828837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.837468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.846219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.854353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.862706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.871238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.893077][ T9580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.919255][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.927852][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.936298][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.946113][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.954356][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.963043][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.971451][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.980914][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.989902][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.041024][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.052177][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.060026][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.068750][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.077459][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.085926][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.095508][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.103107][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.113147][ T9580] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.129529][ T9568] device veth0_vlan entered promiscuous mode [ 106.145413][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.153629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.173415][ T9575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.188468][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.197884][ T9564] device veth0_macvtap entered promiscuous mode [ 106.209570][ T9568] device veth1_vlan entered promiscuous mode [ 106.217993][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.227168][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.243304][ T9571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.272963][ T9564] device veth1_macvtap entered promiscuous mode [ 106.289591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.300128][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.308476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.316390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.323799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.332361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.340606][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.347706][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.383889][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.392334][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.401809][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.410580][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.419753][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.428301][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.435414][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.442863][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.467215][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.488254][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.511306][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.520104][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.530946][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.539680][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.549553][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.558211][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.567352][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.575995][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.588479][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.611789][ T9568] device veth0_macvtap entered promiscuous mode [ 106.620604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.631350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.640089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.650010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.658582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.667541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.676119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.684151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.692431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.702234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.710444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.730066][ T9568] device veth1_macvtap entered promiscuous mode [ 106.744492][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.753290][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.762712][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.779941][ T9580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.791616][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.801889][ T9571] device veth0_vlan entered promiscuous mode [ 106.878143][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.886423][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.907645][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.921185][ T9571] device veth1_vlan entered promiscuous mode [ 107.000370][ T9575] device veth0_vlan entered promiscuous mode [ 107.019506][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 107.040202][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.052696][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.070051][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.078788][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.087975][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.096886][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.106389][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.119576][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.127175][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.142334][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.150105][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.171337][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.180149][ T9568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 107.192477][ T9568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.208744][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.234338][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.243009][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.266345][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.275905][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.288887][ T9575] device veth1_vlan entered promiscuous mode 11:44:32 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 11:44:32 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 107.445740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.454176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.463480][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.470598][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.478736][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.492072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.502180][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.509280][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.518032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.527373][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.544512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.553512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.571556][ T9580] 8021q: adding VLAN 0 to HW filter on device batadv0 11:44:32 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 107.592582][ T9571] device veth0_macvtap entered promiscuous mode [ 107.682531][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.695625][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.703584][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.713513][ C0] hrtimer: interrupt took 26779 ns [ 107.765808][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.774318][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.813403][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.822185][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.835702][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.843931][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.852778][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.871062][ T9571] device veth1_macvtap entered promiscuous mode [ 107.897955][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.914063][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 11:44:32 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 11:44:32 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) socket(0x0, 0x800000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0) [ 107.923231][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.931521][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.940878][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.958841][ T9575] device veth0_macvtap entered promiscuous mode [ 108.009867][ T9575] device veth1_macvtap entered promiscuous mode [ 108.114476][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.172480][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.193202][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.206289][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.223963][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.251425][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:44:32 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) socket(0x0, 0x800000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0) 11:44:32 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 108.271776][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.318319][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.336572][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.347013][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 108.357884][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:44:33 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 108.369894][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.378324][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.409127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.442937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.476717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.507621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.525826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.533257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.542517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.579017][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.589328][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.618222][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.637789][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.648529][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.666239][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.676174][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.689717][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.701554][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.715552][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.725640][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 108.736121][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.747618][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.755425][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.763910][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.773119][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.781751][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.791128][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.799644][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.852552][ T9580] device veth0_vlan entered promiscuous mode [ 108.874810][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.883034][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.969020][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.977490][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.988907][ T9580] device veth1_vlan entered promiscuous mode [ 109.097225][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.105838][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.114311][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.155185][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.175464][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.202406][ T9584] device veth0_vlan entered promiscuous mode [ 109.238143][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.258593][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.267426][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.294156][ T9584] device veth1_vlan entered promiscuous mode [ 109.308879][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.322227][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.334450][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.354091][ T9580] device veth0_macvtap entered promiscuous mode [ 109.363339][ T9653] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.386848][ T9580] device veth1_macvtap entered promiscuous mode [ 109.393926][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.405452][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.413782][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.433792][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.442611][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 11:44:34 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070700be0000090007010a00001e00", 0x15) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) 11:44:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) socket(0x0, 0x800000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0) [ 109.453185][ T9584] device veth0_macvtap entered promiscuous mode [ 109.469430][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.489773][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.501112][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.544962][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.561444][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.579140][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.602919][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.627004][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.643186][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.655809][ T9584] device veth1_macvtap entered promiscuous mode [ 109.672451][ T9662] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.684373][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.694145][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.709363][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.718770][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.746655][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.760015][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.770801][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.781530][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.791735][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.805668][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.830665][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.841605][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.862180][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.878483][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.888198][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.911373][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.923525][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.933844][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.944482][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.954419][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.964911][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.974831][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.985605][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.995469][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.006043][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.017072][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.069745][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.078270][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.087582][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.098403][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.108673][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.119643][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.129708][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.141135][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.151850][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.162288][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.172151][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 110.182583][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.193694][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.203088][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.212199][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:44:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) syz_read_part_table(0x5745568200000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="020005000000000e091400000000000000000f00000000000000000005000000", 0x20, 0x1c0}]) 11:44:35 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 11:44:35 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) socket(0x0, 0x800000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0) 11:44:35 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) socket(0x0, 0x800000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0) 11:44:35 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070700be0000090007010a00001e00", 0x15) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) 11:44:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) [ 110.679596][ T9687] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.712762][ T9692] ================================================================== [ 110.721009][ T9692] BUG: KASAN: use-after-free in __list_add_valid+0x9a/0xa0 [ 110.728204][ T9692] Read of size 8 at addr ffff8880917841e0 by task syz-executor.5/9692 [ 110.736352][ T9692] [ 110.738703][ T9692] CPU: 1 PID: 9692 Comm: syz-executor.5 Not tainted 5.5.0-syzkaller #0 [ 110.746941][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.756993][ T9692] Call Trace: [ 110.760284][ T9692] dump_stack+0x197/0x210 [ 110.764609][ T9692] ? __list_add_valid+0x9a/0xa0 [ 110.769497][ T9692] print_address_description.constprop.0.cold+0xd4/0x30b [ 110.776529][ T9692] ? __list_add_valid+0x9a/0xa0 [ 110.781397][ T9692] ? __list_add_valid+0x9a/0xa0 [ 110.786263][ T9692] __kasan_report.cold+0x1b/0x32 [ 110.791215][ T9692] ? __list_add_valid+0x9a/0xa0 [ 110.796082][ T9692] kasan_report+0x12/0x20 [ 110.800428][ T9692] __asan_report_load8_noabort+0x14/0x20 [ 110.806069][ T9692] __list_add_valid+0x9a/0xa0 [ 110.810754][ T9692] rdma_listen+0x6b7/0x970 [ 110.815177][ T9692] ? _raw_spin_unlock+0x28/0x40 [ 110.820038][ T9692] ucma_listen+0x14d/0x1c0 [ 110.824461][ T9692] ? ucma_notify+0x190/0x190 [ 110.829062][ T9692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 110.835307][ T9692] ? _copy_from_user+0x12c/0x1a0 [ 110.840258][ T9692] ucma_write+0x2d7/0x3c0 [ 110.844594][ T9692] ? ucma_notify+0x190/0x190 [ 110.849192][ T9692] ? ucma_open+0x290/0x290 [ 110.853619][ T9692] ? apparmor_file_permission+0x27/0x30 [ 110.859181][ T9692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 110.865432][ T9692] ? security_file_permission+0x8f/0x380 [ 110.871082][ T9692] __vfs_write+0x8a/0x110 [ 110.875412][ T9692] ? ucma_open+0x290/0x290 11:44:35 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 11:44:35 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) socket(0x0, 0x800000003, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) futex(0x0, 0x1, 0x0, 0x0, &(0x7f0000000280), 0x0) [ 110.879843][ T9692] vfs_write+0x268/0x5d0 [ 110.884121][ T9692] ksys_write+0x220/0x290 [ 110.888464][ T9692] ? __ia32_sys_read+0xb0/0xb0 [ 110.893241][ T9692] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 110.898714][ T9692] ? do_syscall_64+0x26/0x790 [ 110.903455][ T9692] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 110.909529][ T9692] ? do_syscall_64+0x26/0x790 [ 110.914223][ T9692] __x64_sys_write+0x73/0xb0 [ 110.918826][ T9692] do_syscall_64+0xfa/0x790 [ 110.923346][ T9692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 110.929245][ T9692] RIP: 0033:0x45b399 [ 110.933149][ T9692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 110.952785][ T9692] RSP: 002b:00007f1482d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.961212][ T9692] RAX: ffffffffffffffda RBX: 00007f1482d3e6d4 RCX: 000000000045b399 [ 110.969163][ T9692] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 [ 110.977114][ T9692] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 110.985078][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 110.993052][ T9692] R13: 0000000000000c8b R14: 00000000004cd69b R15: 000000000075bf2c [ 111.001038][ T9692] [ 111.003364][ T9692] Allocated by task 9679: [ 111.007691][ T9692] save_stack+0x23/0x90 [ 111.011831][ T9692] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 111.017448][ T9692] kasan_kmalloc+0x9/0x10 [ 111.021756][ T9692] kmem_cache_alloc_trace+0x158/0x790 [ 111.027107][ T9692] __rdma_create_id+0x5e/0x870 [ 111.031868][ T9692] ucma_create_id+0x1de/0x620 [ 111.036547][ T9692] ucma_write+0x2d7/0x3c0 [ 111.040863][ T9692] __vfs_write+0x8a/0x110 [ 111.045175][ T9692] vfs_write+0x268/0x5d0 [ 111.049400][ T9692] ksys_write+0x220/0x290 [ 111.053710][ T9692] __x64_sys_write+0x73/0xb0 [ 111.058280][ T9692] do_syscall_64+0xfa/0x790 [ 111.062768][ T9692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 111.068685][ T9692] [ 111.070995][ T9692] Freed by task 9672: [ 111.074960][ T9692] save_stack+0x23/0x90 [ 111.079094][ T9692] __kasan_slab_free+0x102/0x150 [ 111.084010][ T9692] kasan_slab_free+0xe/0x10 [ 111.088491][ T9692] kfree+0x10a/0x2c0 [ 111.092405][ T9692] rdma_destroy_id+0x7c6/0xdd0 [ 111.097146][ T9692] ucma_close+0x115/0x310 [ 111.101467][ T9692] __fput+0x2ff/0x890 [ 111.105460][ T9692] ____fput+0x16/0x20 [ 111.109466][ T9692] task_work_run+0x145/0x1c0 [ 111.114034][ T9692] exit_to_usermode_loop+0x316/0x380 [ 111.119294][ T9692] do_syscall_64+0x676/0x790 [ 111.123863][ T9692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 111.129816][ T9692] [ 111.132138][ T9692] The buggy address belongs to the object at ffff888091784000 [ 111.132138][ T9692] which belongs to the cache kmalloc-2k of size 2048 [ 111.146164][ T9692] The buggy address is located 480 bytes inside of [ 111.146164][ T9692] 2048-byte region [ffff888091784000, ffff888091784800) [ 111.159501][ T9692] The buggy address belongs to the page: [ 111.165124][ T9692] page:ffffea000245e100 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 111.174203][ T9692] flags: 0xfffe0000000200(slab) [ 111.179034][ T9692] raw: 00fffe0000000200 ffffea000231e748 ffffea0002620248 ffff8880aa400e00 [ 111.187598][ T9692] raw: 0000000000000000 ffff888091784000 0000000100000001 0000000000000000 [ 111.196153][ T9692] page dumped because: kasan: bad access detected [ 111.202536][ T9692] [ 111.204845][ T9692] Memory state around the buggy address: [ 111.210453][ T9692] ffff888091784080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.218493][ T9692] ffff888091784100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.226529][ T9692] >ffff888091784180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.234563][ T9692] ^ [ 111.241730][ T9692] ffff888091784200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.249783][ T9692] ffff888091784280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.257833][ T9692] ================================================================== [ 111.265867][ T9692] Disabling lock debugging due to kernel taint 11:44:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) syz_read_part_table(0x5745568200000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="020005000000000e091400000000000000000f00000000000000000005000000", 0x20, 0x1c0}]) [ 111.280530][ T9692] Kernel panic - not syncing: panic_on_warn set ... [ 111.287143][ T9692] CPU: 1 PID: 9692 Comm: syz-executor.5 Tainted: G B 5.5.0-syzkaller #0 [ 111.296758][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.306804][ T9692] Call Trace: [ 111.310098][ T9692] dump_stack+0x197/0x210 [ 111.314416][ T9692] panic+0x2e3/0x75c [ 111.318356][ T9692] ? add_taint.cold+0x16/0x16 [ 111.323013][ T9692] ? __list_add_valid+0x9a/0xa0 [ 111.327846][ T9692] ? preempt_schedule+0x4b/0x60 [ 111.332675][ T9692] ? ___preempt_schedule+0x16/0x18 [ 111.337769][ T9692] ? trace_hardirqs_on+0x5e/0x240 [ 111.342773][ T9692] ? __list_add_valid+0x9a/0xa0 [ 111.347604][ T9692] end_report+0x47/0x4f [ 111.351738][ T9692] ? __list_add_valid+0x9a/0xa0 [ 111.356566][ T9692] __kasan_report.cold+0xe/0x32 [ 111.361407][ T9692] ? __list_add_valid+0x9a/0xa0 [ 111.366243][ T9692] kasan_report+0x12/0x20 [ 111.370567][ T9692] __asan_report_load8_noabort+0x14/0x20 [ 111.376189][ T9692] __list_add_valid+0x9a/0xa0 [ 111.380843][ T9692] rdma_listen+0x6b7/0x970 [ 111.385242][ T9692] ? _raw_spin_unlock+0x28/0x40 [ 111.390070][ T9692] ucma_listen+0x14d/0x1c0 [ 111.394462][ T9692] ? ucma_notify+0x190/0x190 [ 111.399032][ T9692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 111.405247][ T9692] ? _copy_from_user+0x12c/0x1a0 [ 111.410162][ T9692] ucma_write+0x2d7/0x3c0 [ 111.414471][ T9692] ? ucma_notify+0x190/0x190 [ 111.419046][ T9692] ? ucma_open+0x290/0x290 [ 111.423446][ T9692] ? apparmor_file_permission+0x27/0x30 11:44:36 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070700be0000090007010a00001e00", 0x15) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 111.428979][ T9692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 111.435223][ T9692] ? security_file_permission+0x8f/0x380 [ 111.440869][ T9692] __vfs_write+0x8a/0x110 [ 111.445195][ T9692] ? ucma_open+0x290/0x290 [ 111.449613][ T9692] vfs_write+0x268/0x5d0 [ 111.453873][ T9692] ksys_write+0x220/0x290 [ 111.458210][ T9692] ? __ia32_sys_read+0xb0/0xb0 [ 111.462996][ T9692] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 111.468434][ T9692] ? do_syscall_64+0x26/0x790 [ 111.473095][ T9692] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 111.479143][ T9692] ? do_syscall_64+0x26/0x790 [ 111.483802][ T9692] __x64_sys_write+0x73/0xb0 [ 111.488370][ T9692] do_syscall_64+0xfa/0x790 [ 111.492849][ T9692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 111.498717][ T9692] RIP: 0033:0x45b399 [ 111.502590][ T9692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 111.522186][ T9692] RSP: 002b:00007f1482d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.530570][ T9692] RAX: ffffffffffffffda RBX: 00007f1482d3e6d4 RCX: 000000000045b399 [ 111.538520][ T9692] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 [ 111.546473][ T9692] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 111.554429][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 111.562377][ T9692] R13: 0000000000000c8b R14: 00000000004cd69b R15: 000000000075bf2c [ 111.571474][ T9692] Kernel Offset: disabled [ 111.575789][ T9692] Rebooting in 86400 seconds..