[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. 2020/05/22 15:32:28 fuzzer started 2020/05/22 15:32:29 dialing manager at 10.128.0.26:38661 2020/05/22 15:32:29 syscalls: 3055 2020/05/22 15:32:29 code coverage: enabled 2020/05/22 15:32:29 comparison tracing: enabled 2020/05/22 15:32:29 extra coverage: enabled 2020/05/22 15:32:29 setuid sandbox: enabled 2020/05/22 15:32:29 namespace sandbox: enabled 2020/05/22 15:32:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/22 15:32:29 fault injection: enabled 2020/05/22 15:32:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/22 15:32:29 net packet injection: enabled 2020/05/22 15:32:29 net device setup: enabled 2020/05/22 15:32:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/22 15:32:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/22 15:32:29 USB emulation: enabled 15:32:36 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000140), 0x10, 0x0}, 0x0) syzkaller login: [ 64.451729][ T6845] IPVS: ftp: loaded support on port[0] = 21 15:32:36 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 64.600528][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 64.729739][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.738563][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.748403][ T6845] device bridge_slave_0 entered promiscuous mode [ 64.760609][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.767965][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.776119][ T6845] device bridge_slave_1 entered promiscuous mode [ 64.806524][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.820612][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.868493][ T6845] team0: Port device team_slave_0 added [ 64.878564][ T6845] team0: Port device team_slave_1 added [ 64.895064][ T6985] IPVS: ftp: loaded support on port[0] = 21 15:32:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002780), 0x14) [ 64.930537][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.938758][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.966886][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.009804][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.016791][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.048059][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.162258][ T6845] device hsr_slave_0 entered promiscuous mode 15:32:37 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 65.218671][ T6845] device hsr_slave_1 entered promiscuous mode [ 65.336854][ T7033] IPVS: ftp: loaded support on port[0] = 21 [ 65.494672][ T6985] chnl_net:caif_netlink_parms(): no params data found [ 65.644912][ T7144] IPVS: ftp: loaded support on port[0] = 21 15:32:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000110"], 0x2c}}, 0x0) [ 65.805982][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 65.832218][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.847176][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.855753][ T6985] device bridge_slave_0 entered promiscuous mode [ 65.905245][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.917767][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.926323][ T6985] device bridge_slave_1 entered promiscuous mode [ 65.992330][ T6845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.062143][ T6845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.137331][ T6845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.152033][ T7323] IPVS: ftp: loaded support on port[0] = 21 15:32:38 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) [ 66.181167][ T6845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.244255][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.277999][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.431518][ T6985] team0: Port device team_slave_0 added [ 66.443272][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.450589][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.459002][ T7033] device bridge_slave_0 entered promiscuous mode [ 66.469431][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 66.484084][ T6985] team0: Port device team_slave_1 added [ 66.509677][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.516753][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.525349][ T7033] device bridge_slave_1 entered promiscuous mode [ 66.558236][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.570944][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.580207][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.607585][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.631165][ T7441] IPVS: ftp: loaded support on port[0] = 21 [ 66.641687][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.652241][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.659664][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.686211][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.763463][ T7033] team0: Port device team_slave_0 added [ 66.810946][ T6985] device hsr_slave_0 entered promiscuous mode [ 66.867571][ T6985] device hsr_slave_1 entered promiscuous mode [ 66.927302][ T6985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.935105][ T6985] Cannot create hsr debugfs directory [ 66.961608][ T7033] team0: Port device team_slave_1 added [ 67.026434][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.035981][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.065404][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.079691][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.090576][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.099806][ T7144] device bridge_slave_0 entered promiscuous mode [ 67.126057][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.136020][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.163967][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.186971][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.194154][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.204440][ T7144] device bridge_slave_1 entered promiscuous mode [ 67.335249][ T7323] chnl_net:caif_netlink_parms(): no params data found [ 67.368809][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.430698][ T7033] device hsr_slave_0 entered promiscuous mode [ 67.487394][ T7033] device hsr_slave_1 entered promiscuous mode [ 67.526934][ T7033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.534806][ T7033] Cannot create hsr debugfs directory [ 67.561872][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.603648][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.719398][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.732771][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.745934][ T7144] team0: Port device team_slave_0 added [ 67.760081][ T6985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.806240][ T6985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.850562][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.860003][ T7144] team0: Port device team_slave_1 added [ 67.895073][ T6985] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.954459][ T6985] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.002991][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.010412][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.037268][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.053258][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.060531][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.087997][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.102958][ T7441] chnl_net:caif_netlink_parms(): no params data found [ 68.151830][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.163498][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.172858][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.180149][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.189309][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.199124][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.207749][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.214832][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.233643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.242672][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.329730][ T7144] device hsr_slave_0 entered promiscuous mode [ 68.367623][ T7144] device hsr_slave_1 entered promiscuous mode [ 68.406783][ T7144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.414607][ T7144] Cannot create hsr debugfs directory [ 68.434679][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.442598][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.451837][ T7323] device bridge_slave_0 entered promiscuous mode [ 68.461347][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.469456][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.478592][ T7323] device bridge_slave_1 entered promiscuous mode [ 68.506233][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.580123][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.610038][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.652806][ T7323] team0: Port device team_slave_0 added [ 68.665227][ T7323] team0: Port device team_slave_1 added [ 68.732838][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.742777][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.754279][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.775626][ T6845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.786352][ T6845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.824078][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.841221][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.852946][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.862923][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.872759][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.881509][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.897701][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.905899][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.914648][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.942313][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.957147][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.964102][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.991433][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.002975][ T7033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.050303][ T7033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.098988][ T7033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.138538][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.145629][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.154509][ T7441] device bridge_slave_0 entered promiscuous mode [ 69.211926][ T7323] device hsr_slave_0 entered promiscuous mode [ 69.257011][ T7323] device hsr_slave_1 entered promiscuous mode [ 69.296694][ T7323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.304329][ T7323] Cannot create hsr debugfs directory [ 69.323179][ T7033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.375333][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.382738][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.391780][ T7441] device bridge_slave_1 entered promiscuous mode [ 69.445784][ T7441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.484592][ T7441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.507709][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.515254][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.523706][ T7144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.590284][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.598745][ T7144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.640322][ T7441] team0: Port device team_slave_0 added [ 69.655745][ T7144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.702330][ T7144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.759762][ T7441] team0: Port device team_slave_1 added [ 69.864522][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.872051][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.898542][ T7441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.916222][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.926159][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.976038][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.983125][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.010955][ T7441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.039123][ T7323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.094990][ T7323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.153098][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.178719][ T7323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.260417][ T7323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.308231][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.317823][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.327928][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.335730][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.400872][ T7441] device hsr_slave_0 entered promiscuous mode [ 70.466857][ T7441] device hsr_slave_1 entered promiscuous mode [ 70.506559][ T7441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.514134][ T7441] Cannot create hsr debugfs directory [ 70.535190][ T6985] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.543784][ T6845] device veth0_vlan entered promiscuous mode [ 70.564740][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.573559][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.617887][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.631656][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.640813][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.648098][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.683047][ T6845] device veth1_vlan entered promiscuous mode [ 70.695242][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.704255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.719270][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.761349][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.772155][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.783695][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.792897][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.800068][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.808731][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.838868][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.848104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.861449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.869525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.888097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.898624][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.954528][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.964922][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.975639][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.984603][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.991760][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.000142][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.009154][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.018050][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.025128][ T2508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.032927][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.041822][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.050693][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.063724][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.099589][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.126478][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.135438][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.148435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.158618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.168590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.212241][ T7441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.289398][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.301042][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.310433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.319416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.328740][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.337833][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.347174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.374189][ T6845] device veth0_macvtap entered promiscuous mode [ 71.391894][ T6985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.403735][ T7441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.439435][ T7441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.500547][ T7441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.568645][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.578018][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.591491][ T6845] device veth1_macvtap entered promiscuous mode [ 71.594958][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.631917][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.656276][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.668873][ T7033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.682140][ T7033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.693279][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.702837][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.711409][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.720036][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.729042][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.738378][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.747498][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.756128][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.765505][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.772644][ T2515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.780599][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.788788][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.839663][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.848598][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.858216][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.867696][ T2489] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.875093][ T2489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.883589][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.892454][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.901030][ T2489] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.908179][ T2489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.915751][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.925182][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.934018][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.942585][ T2489] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.949735][ T2489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.957575][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.966258][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.973746][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.981350][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.990816][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.004821][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.020342][ T6985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.033462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.042840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.055407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.094834][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.126107][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.135522][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.145116][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.161923][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.171204][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.180759][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.190036][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.199070][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.208291][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.219541][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.229308][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.238813][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.249515][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.258230][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.269464][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.295631][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.303997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.331129][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.368969][ T7144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.380631][ T7144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.394894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.405867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.414945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.423772][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.432802][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.441759][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.451615][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.588752][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.598126][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.625146][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.632767][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.642492][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.651825][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.662779][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.671136][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.691899][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.704896][ T6985] device veth0_vlan entered promiscuous mode [ 72.758552][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.773995][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.798152][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 15:32:44 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000140), 0x10, 0x0}, 0x0) [ 72.826025][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 15:32:44 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000140), 0x10, 0x0}, 0x0) [ 72.875102][ T6985] device veth1_vlan entered promiscuous mode [ 72.902374][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0 15:32:44 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000140), 0x10, 0x0}, 0x0) [ 72.944751][ T7441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.971898][ T7033] device veth0_vlan entered promiscuous mode [ 73.029455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.053094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 15:32:45 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000140), 0x10, 0x0}, 0x0) [ 73.122193][ T7441] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.152638][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.164216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 15:32:45 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000140), 0x10, 0x0}, 0x0) [ 73.179740][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.192938][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.214120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 15:32:45 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name, 0x10) r1 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000140), 0x10, 0x0}, 0x0) [ 73.231343][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.320091][ T7033] device veth1_vlan entered promiscuous mode [ 73.339257][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.351688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 15:32:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b", 0xe0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 73.389221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.418210][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.425953][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.444810][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.454124][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.466399][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.475514][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.484497][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.512521][ T6985] device veth0_macvtap entered promiscuous mode [ 73.529007][ T7144] device veth0_vlan entered promiscuous mode [ 73.584095][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.601717][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.613987][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.630545][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.637782][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.654486][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.663876][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.678207][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.688550][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.697774][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.725258][ T7323] device veth0_vlan entered promiscuous mode [ 73.734968][ T6985] device veth1_macvtap entered promiscuous mode [ 73.747430][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.755467][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.766713][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.774947][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.784152][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.795439][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.804037][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.826402][ T7144] device veth1_vlan entered promiscuous mode [ 73.857553][ T7323] device veth1_vlan entered promiscuous mode [ 73.864645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.873525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.884070][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.893672][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.903004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.912111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.921636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.931098][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.940415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.950310][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.972124][ T7441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.982870][ T7441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.998917][ T7033] device veth0_macvtap entered promiscuous mode [ 74.010007][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.020177][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.030742][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.041465][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.052597][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.061776][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.088339][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.100506][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.112716][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.139778][ T7033] device veth1_macvtap entered promiscuous mode [ 74.153667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.164354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.173971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.182080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.190731][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.205323][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.218727][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.234104][ T7144] device veth0_macvtap entered promiscuous mode [ 74.257143][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.277805][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.288431][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.300884][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.310555][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.319937][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.329224][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.343307][ T7323] device veth0_macvtap entered promiscuous mode [ 74.356648][ T7144] device veth1_macvtap entered promiscuous mode [ 74.371146][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.383630][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.394860][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.406878][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.419321][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.428408][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.437655][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.445686][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.455410][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.465207][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.566579][ T7323] device veth1_macvtap entered promiscuous mode [ 74.590897][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.603900][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.617018][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.627858][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.639322][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.649803][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.661799][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.723418][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.735240][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.754411][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.774129][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.794644][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.821117][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.847573][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.860934][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.874349][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.887076][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.898140][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.910164][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.920189][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.932736][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.942637][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.953154][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.966561][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.994483][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.003591][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.092011][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.104123][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.114853][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.125946][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.135767][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.148146][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.161547][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.172478][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.184276][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 15:32:47 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 75.220490][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.233955][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.426338][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.447029][ T2508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.467010][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.496860][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.517231][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.543163][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.553873][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.572628][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.583237][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.599893][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.614676][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.663704][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.677681][ T2489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:32:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002780), 0x14) [ 75.797668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.816580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.918672][ T7441] device veth0_vlan entered promiscuous mode [ 75.926369][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.934296][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.015263][ T7441] device veth1_vlan entered promiscuous mode [ 76.049542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.140669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.161273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.176296][ T7441] device veth0_macvtap entered promiscuous mode [ 76.195003][ T7441] device veth1_macvtap entered promiscuous mode [ 76.223976][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.234752][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.259623][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.273719][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.294980][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.314995][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:32:48 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b", 0xe0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 76.335520][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.353144][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.363146][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.385950][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.426879][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.447922][ T2518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.464942][ T2518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.474986][ T2518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.485630][ T2518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.500200][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.511802][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.523620][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.534682][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.545768][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.558152][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.568088][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.579844][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.589935][ T7441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.600448][ T7441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.612975][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.627403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.637165][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:32:48 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:48 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 15:32:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002780), 0x14) 15:32:48 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000110"], 0x2c}}, 0x0) 15:32:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000110"], 0x2c}}, 0x0) 15:32:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002780), 0x14) 15:32:49 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000110"], 0x2c}}, 0x0) 15:32:49 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:49 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:49 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 78.333171][ T0] NOHZ: local_softirq_pending 08 15:32:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b", 0xe0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 15:32:51 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 15:32:51 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:51 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:51 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:51 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:51 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) clock_nanosleep(0x0, 0x0, &(0x7f0000000140), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1004000000015) 15:32:51 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:51 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:51 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:51 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 15:32:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b", 0xe0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 15:32:54 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 15:32:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 15:32:54 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:54 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:54 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 15:32:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 15:32:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 15:32:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 15:32:54 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 15:32:54 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 15:32:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 15:32:57 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 15:32:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000035000511d25a80648c63940d0124fc60100035400a6c02000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) 15:32:57 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:57 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:57 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15:32:57 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x2}, @TCA_RED_STAB={0x104, 0x2, "b187fe38135f58ca008c966b686888442f25d5a2da7d0e9431b00a6a80a583880037fa828f1f6aae668593dae96ce0115e947568e4356e986a3acbac2c7246d31ab66b51977f09f6bf78dc7122dcf5207ec07969b69aedfd7de121b654ab6c7dcce6ffce8153e9f0b9cc6e8c106967a4a0a8bcc8632a0c1fc2f5388dacb491aaeaa7bf137b113ad908fe0e3a7bd8d025d9a31a3a05a2a4de901a24fb9cda9be42bbf1aa82ddecd48fff531b66b4851693095625a4333e5825fddd4ac195d2ece15789b96ea48b886c931070031493a0648a50d715be666149b4b17c11a94deedc59b4fc246b243bc822e8857cda92dde4d128e27e1d1ae02ec5684a4d082ba04"}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) [ 85.663412][ T8319] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.697908][ T8319] openvswitch: netlink: Flow key attr not present in new flow. 15:32:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000035000511d25a80648c63940d0124fc60100035400a6c02000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) 15:32:57 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x2}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) [ 85.810241][ T8336] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.824560][ T8336] openvswitch: netlink: Flow key attr not present in new flow. 15:32:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000035000511d25a80648c63940d0124fc60100035400a6c02000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 85.940431][ T8349] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.950220][ T8349] openvswitch: netlink: Flow key attr not present in new flow. 15:32:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 15:32:57 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x2}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) 15:32:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000035000511d25a80648c63940d0124fc60100035400a6c02000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) 15:32:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x2}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) [ 86.109305][ T8365] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.119143][ T8365] openvswitch: netlink: Flow key attr not present in new flow. 15:32:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 15:32:58 executing program 4: r0 = epoll_create1(0x0) pwritev(r0, 0x0, 0x0, 0x0) 15:32:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 15:32:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0, 0x4}, 0x20) 15:32:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 15:32:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5452, 0xffffffffffffffff) 15:32:58 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 15:32:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0, 0x4}, 0x20) 15:32:58 executing program 4: r0 = epoll_create1(0x0) pwritev(r0, 0x0, 0x0, 0x0) 15:32:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0, 0x4}, 0x20) 15:32:58 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 15:32:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5452, 0xffffffffffffffff) 15:32:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 15:32:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5452, 0xffffffffffffffff) 15:32:58 executing program 4: r0 = epoll_create1(0x0) pwritev(r0, 0x0, 0x0, 0x0) 15:32:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0, 0x4}, 0x20) 15:32:58 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 15:32:58 executing program 4: r0 = epoll_create1(0x0) pwritev(r0, 0x0, 0x0, 0x0) 15:32:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5452, 0xffffffffffffffff) 15:32:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5452, 0xffffffffffffffff) 15:32:59 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 15:32:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) 15:32:59 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 15:32:59 executing program 4: r0 = epoll_create1(0x0) pwritev(r0, 0x0, 0x0, 0x0) 15:32:59 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 15:32:59 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5452, 0xffffffffffffffff) 15:32:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5412, &(0x7f0000000040)) 15:32:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5452, 0xffffffffffffffff) 15:32:59 executing program 4: r0 = epoll_create1(0x0) pwritev(r0, 0x0, 0x0, 0x0) 15:32:59 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 15:32:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80104592, &(0x7f0000000000)=0x300000) 15:32:59 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) 15:32:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) 15:32:59 executing program 4: r0 = epoll_create1(0x0) pwritev(r0, 0x0, 0x0, 0x0) 15:32:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:32:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5412, &(0x7f0000000040)) 15:32:59 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) [ 87.641718][ T29] audit: type=1800 audit(1590161579.588:2): pid=8488 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 15:32:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) [ 87.706891][ T29] audit: type=1800 audit(1590161579.628:3): pid=8488 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 15:32:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) 15:32:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:32:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80104592, &(0x7f0000000000)=0x300000) 15:32:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5412, &(0x7f0000000040)) 15:32:59 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) 15:32:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) [ 87.874456][ T29] audit: type=1800 audit(1590161579.818:4): pid=8501 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 15:32:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:32:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) 15:32:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5412, &(0x7f0000000040)) 15:33:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80104592, &(0x7f0000000000)=0x300000) 15:33:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) [ 88.011997][ T29] audit: type=1800 audit(1590161579.958:5): pid=8514 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 15:33:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) [ 88.182038][ T29] audit: type=1800 audit(1590161580.128:6): pid=8528 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 15:33:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) 15:33:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80104592, &(0x7f0000000000)=0x300000) 15:33:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) [ 88.361275][ T29] audit: type=1800 audit(1590161580.309:7): pid=8536 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 15:33:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) 15:33:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) [ 88.441776][ T29] audit: type=1800 audit(1590161580.339:8): pid=8533 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 15:33:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5412, &(0x7f0000000040)) 15:33:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) 15:33:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) [ 88.565642][ T29] audit: type=1800 audit(1590161580.349:9): pid=8540 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 15:33:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) 15:33:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) [ 88.715935][ T29] audit: type=1800 audit(1590161580.489:10): pid=8549 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 15:33:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x6410, 0x4) 15:33:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5412, &(0x7f0000000040)) 15:33:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) 15:33:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffff004) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000007}, 0xe000f00}], 0x400000000000022, 0x0) [ 88.816385][ T29] audit: type=1800 audit(1590161580.519:11): pid=8550 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 15:33:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xfffffeff, 0x101}) 15:33:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}}) [ 88.961399][ C0] hrtimer: interrupt took 51325 ns 15:33:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x6410, 0x4) 15:33:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x6410, 0x4) 15:33:01 executing program 2: clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x742508) 15:33:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xfffffeff, 0x101}) 15:33:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5412, &(0x7f0000000040)) 15:33:01 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x6410, 0x4) [ 89.270057][ T8591] ubi0: attaching mtd0 15:33:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x6410, 0x4) [ 89.319809][ T8591] ubi0: scanning is finished 15:33:01 executing program 0: syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @random="09e2d4f75baf", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000200", 0xc, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 89.353825][ T8591] ubi0: empty MTD device detected 15:33:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xfffffeff, 0x101}) 15:33:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffff004) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000007}, 0xe000f00}], 0x400000000000022, 0x0) 15:33:01 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x6410, 0x4) 15:33:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x6410, 0x4) [ 89.532030][ T8591] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 15:33:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xfffffeff, 0x101}) [ 89.580235][ T8591] ================================================================== [ 89.588549][ T8591] BUG: KASAN: use-after-free in uif_close+0x15e/0x190 [ 89.595320][ T8591] Read of size 4 at addr ffff8880695fc9e8 by task syz-executor.2/8591 [ 89.603465][ T8591] [ 89.605805][ T8591] CPU: 0 PID: 8591 Comm: syz-executor.2 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 89.615601][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.625831][ T8591] Call Trace: [ 89.629136][ T8591] dump_stack+0x18f/0x20d [ 89.633589][ T8591] ? uif_close+0x15e/0x190 [ 89.638018][ T8591] ? uif_close+0x15e/0x190 [ 89.642443][ T8591] print_address_description.constprop.0.cold+0xd3/0x413 [ 89.649479][ T8591] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 89.655470][ T8591] ? vprintk_func+0x97/0x1a6 [ 89.660070][ T8591] ? uif_close+0x15e/0x190 [ 89.664487][ T8591] kasan_report.cold+0x1f/0x37 [ 89.669261][ T8591] ? uif_close+0x15e/0x190 [ 89.673766][ T8591] uif_close+0x15e/0x190 [ 89.678007][ T8591] ubi_attach_mtd_dev+0x157e/0x27c0 [ 89.683234][ T8591] ? ubi_free_internal_volumes+0x50/0x50 [ 89.688874][ T8591] ? __get_mtd_device+0x210/0x210 [ 89.693903][ T8591] ? __might_fault+0x190/0x1d0 [ 89.698684][ T8591] ctrl_cdev_ioctl+0x229/0x2b0 [ 89.703457][ T8591] ? vol_cdev_llseek+0x160/0x160 [ 89.708399][ T8591] ? vol_cdev_llseek+0x160/0x160 [ 89.713379][ T8591] ksys_ioctl+0x11a/0x180 [ 89.717689][ T8591] __x64_sys_ioctl+0x6f/0xb0 [ 89.722273][ T8591] do_syscall_64+0xf6/0x7d0 [ 89.726779][ T8591] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 89.732652][ T8591] RIP: 0033:0x45ca29 [ 89.736544][ T8591] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 89.756126][ T8591] RSP: 002b:00007fead11abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.764526][ T8591] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 89.772488][ T8591] RDX: 0000000000742508 RSI: 0000000040186f40 RDI: 0000000000000003 [ 89.780451][ T8591] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 89.788396][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 89.796355][ T8591] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007fead11ac6d4 [ 89.804522][ T8591] [ 89.806847][ T8591] Allocated by task 8591: [ 89.811178][ T8591] save_stack+0x1b/0x40 [ 89.815339][ T8591] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 89.820984][ T8591] kmem_cache_alloc_trace+0x153/0x7d0 [ 89.826365][ T8591] ubi_attach_mtd_dev+0x2e7/0x27c0 [ 89.831563][ T8591] ctrl_cdev_ioctl+0x229/0x2b0 [ 89.836341][ T8591] ksys_ioctl+0x11a/0x180 [ 89.840671][ T8591] __x64_sys_ioctl+0x6f/0xb0 [ 89.845258][ T8591] do_syscall_64+0xf6/0x7d0 [ 89.849758][ T8591] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 89.855645][ T8591] [ 89.857971][ T8591] Freed by task 8591: [ 89.862040][ T8591] save_stack+0x1b/0x40 [ 89.866199][ T8591] __kasan_slab_free+0xf7/0x140 [ 89.871045][ T8591] kfree+0x109/0x2b0 [ 89.874937][ T8591] device_release+0x71/0x200 [ 89.879525][ T8591] kobject_put+0x1c8/0x2f0 [ 89.883937][ T8591] cdev_device_del+0x69/0x80 [ 89.888531][ T8591] uif_close+0xea/0x190 [ 89.892685][ T8591] ubi_attach_mtd_dev+0x157e/0x27c0 [ 89.897893][ T8591] ctrl_cdev_ioctl+0x229/0x2b0 [ 89.902669][ T8591] ksys_ioctl+0x11a/0x180 [ 89.907009][ T8591] __x64_sys_ioctl+0x6f/0xb0 [ 89.911618][ T8591] do_syscall_64+0xf6/0x7d0 [ 89.916131][ T8591] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 89.922053][ T8591] [ 89.924383][ T8591] The buggy address belongs to the object at ffff8880695fc000 [ 89.924383][ T8591] which belongs to the cache kmalloc-8k of size 8192 [ 89.938437][ T8591] The buggy address is located 2536 bytes inside of [ 89.938437][ T8591] 8192-byte region [ffff8880695fc000, ffff8880695fe000) [ 89.951967][ T8591] The buggy address belongs to the page: [ 89.957892][ T8591] page:ffffea0001a57f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea0001a57f00 order:2 compound_mapcount:0 compound_pincount:0 [ 89.973080][ T8591] flags: 0xfffe0000010200(slab|head) [ 89.978397][ T8591] raw: 00fffe0000010200 ffffea0001a57908 ffffea00021db408 ffff8880aa0021c0 [ 89.986990][ T8591] raw: 0000000000000000 ffff8880695fc000 0000000100000001 0000000000000000 [ 89.995595][ T8591] page dumped because: kasan: bad access detected [ 90.002008][ T8591] [ 90.004334][ T8591] Memory state around the buggy address: [ 90.009972][ T8591] ffff8880695fc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.018043][ T8591] ffff8880695fc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 15:33:02 executing program 0: syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @random="09e2d4f75baf", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000200", 0xc, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 90.026113][ T8591] >ffff8880695fc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.034176][ T8591] ^ [ 90.041635][ T8591] ffff8880695fca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.049883][ T8591] ffff8880695fca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.058158][ T8591] ================================================================== [ 90.066570][ T8591] Disabling lock debugging due to kernel taint [ 90.315846][ T8591] Kernel panic - not syncing: panic_on_warn set ... [ 90.322476][ T8591] CPU: 0 PID: 8591 Comm: syz-executor.2 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 90.333658][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.343709][ T8591] Call Trace: [ 90.347003][ T8591] dump_stack+0x18f/0x20d [ 90.351336][ T8591] ? uif_close+0x110/0x190 [ 90.355747][ T8591] panic+0x2e3/0x75c [ 90.359639][ T8591] ? __warn_printk+0xf3/0xf3 [ 90.364227][ T8591] ? preempt_schedule_common+0x5e/0xc0 [ 90.369684][ T8591] ? uif_close+0x15e/0x190 [ 90.374101][ T8591] ? uif_close+0x15e/0x190 [ 90.378517][ T8591] ? preempt_schedule_thunk+0x16/0x18 [ 90.383894][ T8591] ? trace_hardirqs_on+0x55/0x230 [ 90.388923][ T8591] ? uif_close+0x15e/0x190 [ 90.393405][ T8591] ? uif_close+0x15e/0x190 [ 90.398084][ T8591] end_report+0x4d/0x53 [ 90.402850][ T8591] kasan_report.cold+0xd/0x37 [ 90.407534][ T8591] ? uif_close+0x15e/0x190 [ 90.411951][ T8591] uif_close+0x15e/0x190 [ 90.416198][ T8591] ubi_attach_mtd_dev+0x157e/0x27c0 [ 90.421406][ T8591] ? ubi_free_internal_volumes+0x50/0x50 [ 90.427042][ T8591] ? __get_mtd_device+0x210/0x210 [ 90.432093][ T8591] ? __might_fault+0x190/0x1d0 [ 90.436872][ T8591] ctrl_cdev_ioctl+0x229/0x2b0 [ 90.441640][ T8591] ? vol_cdev_llseek+0x160/0x160 [ 90.446591][ T8591] ? vol_cdev_llseek+0x160/0x160 [ 90.451706][ T8591] ksys_ioctl+0x11a/0x180 [ 90.456044][ T8591] __x64_sys_ioctl+0x6f/0xb0 [ 90.460630][ T8591] do_syscall_64+0xf6/0x7d0 [ 90.465109][ T8591] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 90.470973][ T8591] RIP: 0033:0x45ca29 [ 90.474862][ T8591] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 90.494586][ T8591] RSP: 002b:00007fead11abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.502974][ T8591] RAX: ffffffffffffffda RBX: 00000000004e1080 RCX: 000000000045ca29 [ 90.510934][ T8591] RDX: 0000000000742508 RSI: 0000000040186f40 RDI: 0000000000000003 [ 90.518882][ T8591] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 90.526843][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 90.534805][ T8591] R13: 0000000000000209 R14: 00000000004c44c1 R15: 00007fead11ac6d4 [ 90.544068][ T8591] Kernel Offset: disabled [ 90.548386][ T8591] Rebooting in 86400 seconds..