syzkaller login: [ 113.564989][ T3119] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 118.627766][ T3119] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 122.369444][ T3119] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:5553' (ECDSA) to the list of known hosts. 1970/01/01 00:02:21 fuzzer started 1970/01/01 00:02:24 dialing manager at localhost:35763 1970/01/01 00:02:26 syscalls: 2797 1970/01/01 00:02:26 code coverage: CONFIG_KCOV is not enabled 1970/01/01 00:02:26 comparison tracing: CONFIG_KCOV is not enabled 1970/01/01 00:02:26 extra coverage: CONFIG_KCOV is not enabled 1970/01/01 00:02:26 setuid sandbox: enabled 1970/01/01 00:02:26 namespace sandbox: enabled 1970/01/01 00:02:26 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:02:26 fault injection: enabled 1970/01/01 00:02:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:02:26 net packet injection: enabled 1970/01/01 00:02:26 net device setup: enabled 1970/01/01 00:02:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:02:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:02:26 USB emulation: enabled 1970/01/01 00:02:26 hci packet injection: /dev/vhci does not exist 1970/01/01 00:02:26 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:02:26 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:02:26 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:02:26 fetching corpus: 50, signal 104/4075 (executing program) 1970/01/01 00:02:26 fetching corpus: 100, signal 215/6114 (executing program) 1970/01/01 00:02:26 fetching corpus: 150, signal 310/8107 (executing program) 1970/01/01 00:02:27 fetching corpus: 200, signal 408/10077 (executing program) 1970/01/01 00:02:27 fetching corpus: 250, signal 500/11869 (executing program) 1970/01/01 00:02:27 fetching corpus: 300, signal 592/11869 (executing program) 1970/01/01 00:02:27 fetching corpus: 350, signal 685/11869 (executing program) 1970/01/01 00:02:27 fetching corpus: 400, signal 792/11870 (executing program) 1970/01/01 00:02:27 fetching corpus: 450, signal 904/11870 (executing program) 1970/01/01 00:02:27 fetching corpus: 500, signal 1012/11875 (executing program) 1970/01/01 00:02:27 fetching corpus: 550, signal 1102/11875 (executing program) 1970/01/01 00:02:28 fetching corpus: 600, signal 1194/11875 (executing program) 1970/01/01 00:02:28 fetching corpus: 650, signal 1303/11875 (executing program) 1970/01/01 00:02:28 fetching corpus: 699, signal 1410/11875 (executing program) 1970/01/01 00:02:28 fetching corpus: 749, signal 1499/11875 (executing program) 1970/01/01 00:02:28 fetching corpus: 799, signal 1590/11875 (executing program) 1970/01/01 00:02:28 fetching corpus: 849, signal 1679/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 899, signal 1759/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 949, signal 1843/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 999, signal 1936/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 1048, signal 2015/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 1098, signal 2113/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 1148, signal 2210/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 1198, signal 2299/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 1248, signal 2392/11875 (executing program) 1970/01/01 00:02:29 fetching corpus: 1298, signal 2490/11876 (executing program) 1970/01/01 00:02:29 fetching corpus: 1348, signal 2578/11878 (executing program) 1970/01/01 00:02:30 fetching corpus: 1397, signal 2666/11878 (executing program) 1970/01/01 00:02:30 fetching corpus: 1447, signal 2756/11879 (executing program) 1970/01/01 00:02:30 fetching corpus: 1497, signal 2837/11879 (executing program) 1970/01/01 00:02:30 fetching corpus: 1547, signal 2926/11879 (executing program) 1970/01/01 00:02:30 fetching corpus: 1597, signal 3035/11879 (executing program) 1970/01/01 00:02:30 fetching corpus: 1647, signal 3117/11881 (executing program) 1970/01/01 00:02:30 fetching corpus: 1697, signal 3206/11881 (executing program) 1970/01/01 00:02:30 fetching corpus: 1747, signal 3287/11881 (executing program) 1970/01/01 00:02:30 fetching corpus: 1797, signal 3368/11881 (executing program) 1970/01/01 00:02:31 fetching corpus: 1847, signal 3457/11881 (executing program) 1970/01/01 00:02:31 fetching corpus: 1897, signal 3539/11881 (executing program) 1970/01/01 00:02:31 fetching corpus: 1947, signal 3630/11883 (executing program) 1970/01/01 00:02:31 fetching corpus: 1997, signal 3722/11883 (executing program) 1970/01/01 00:02:31 fetching corpus: 2047, signal 3804/11883 (executing program) 1970/01/01 00:02:31 fetching corpus: 2097, signal 3888/11883 (executing program) 1970/01/01 00:02:31 fetching corpus: 2147, signal 3983/11883 (executing program) 1970/01/01 00:02:31 fetching corpus: 2197, signal 4062/11883 (executing program) 1970/01/01 00:02:31 fetching corpus: 2246, signal 4143/11884 (executing program) 1970/01/01 00:02:32 fetching corpus: 2296, signal 4229/11884 (executing program) 1970/01/01 00:02:32 fetching corpus: 2346, signal 4308/11885 (executing program) 1970/01/01 00:02:32 fetching corpus: 2396, signal 4381/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2446, signal 4465/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2496, signal 4533/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2546, signal 4625/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2596, signal 4702/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2646, signal 4773/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2696, signal 4849/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2746, signal 4932/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2796, signal 5018/11886 (executing program) 1970/01/01 00:02:32 fetching corpus: 2846, signal 5088/11886 (executing program) 1970/01/01 00:02:33 fetching corpus: 2896, signal 5169/11886 (executing program) 1970/01/01 00:02:33 fetching corpus: 2946, signal 5232/11886 (executing program) 1970/01/01 00:02:33 fetching corpus: 2996, signal 5310/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3046, signal 5385/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3096, signal 5465/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3146, signal 5536/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3196, signal 5615/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3246, signal 5691/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3296, signal 5754/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3346, signal 5828/11887 (executing program) 1970/01/01 00:02:33 fetching corpus: 3396, signal 5903/11887 (executing program) 1970/01/01 00:02:34 fetching corpus: 3446, signal 5965/11887 (executing program) 1970/01/01 00:02:34 fetching corpus: 3496, signal 6043/11887 (executing program) 1970/01/01 00:02:34 fetching corpus: 3546, signal 6111/11887 (executing program) 1970/01/01 00:02:34 fetching corpus: 3595, signal 6179/11887 (executing program) 1970/01/01 00:02:34 fetching corpus: 3645, signal 6256/11889 (executing program) 1970/01/01 00:02:34 fetching corpus: 3695, signal 6325/11889 (executing program) 1970/01/01 00:02:34 fetching corpus: 3745, signal 6416/11889 (executing program) 1970/01/01 00:02:34 fetching corpus: 3795, signal 6494/11889 (executing program) 1970/01/01 00:02:34 fetching corpus: 3845, signal 6571/11889 (executing program) 1970/01/01 00:02:34 fetching corpus: 3895, signal 6645/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 3945, signal 6721/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 3995, signal 6793/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 4045, signal 6856/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 4095, signal 6928/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 4145, signal 7005/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 4195, signal 7081/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 4245, signal 7150/11889 (executing program) 1970/01/01 00:02:35 fetching corpus: 4295, signal 7216/11890 (executing program) 1970/01/01 00:02:35 fetching corpus: 4345, signal 7290/11890 (executing program) 1970/01/01 00:02:35 fetching corpus: 4395, signal 7355/11890 (executing program) 1970/01/01 00:02:35 fetching corpus: 4445, signal 7434/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4495, signal 7497/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4545, signal 7573/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4595, signal 7654/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4645, signal 7723/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4695, signal 7789/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4745, signal 7859/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4795, signal 7929/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4845, signal 7991/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4895, signal 8065/11890 (executing program) 1970/01/01 00:02:36 fetching corpus: 4945, signal 8134/11892 (executing program) 1970/01/01 00:02:36 fetching corpus: 4995, signal 8203/11892 (executing program) 1970/01/01 00:02:36 fetching corpus: 5044, signal 8281/11893 (executing program) 1970/01/01 00:02:36 fetching corpus: 5094, signal 8345/11893 (executing program) 1970/01/01 00:02:37 fetching corpus: 5144, signal 8417/11893 (executing program) 1970/01/01 00:02:37 fetching corpus: 5194, signal 8481/11893 (executing program) 1970/01/01 00:02:37 fetching corpus: 5244, signal 8555/11893 (executing program) 1970/01/01 00:02:37 fetching corpus: 5294, signal 8627/11894 (executing program) 1970/01/01 00:02:37 fetching corpus: 5344, signal 8701/11895 (executing program) 1970/01/01 00:02:37 fetching corpus: 5394, signal 8772/11895 (executing program) 1970/01/01 00:02:37 fetching corpus: 5444, signal 8836/11895 (executing program) 1970/01/01 00:02:37 fetching corpus: 5494, signal 8897/11895 (executing program) 1970/01/01 00:02:37 fetching corpus: 5544, signal 8961/11895 (executing program) 1970/01/01 00:02:37 fetching corpus: 5594, signal 9027/11895 (executing program) 1970/01/01 00:02:38 fetching corpus: 5644, signal 9098/11895 (executing program) 1970/01/01 00:02:38 fetching corpus: 5694, signal 9164/11895 (executing program) 1970/01/01 00:02:38 fetching corpus: 5744, signal 9227/11896 (executing program) 1970/01/01 00:02:38 fetching corpus: 5794, signal 9291/11896 (executing program) 1970/01/01 00:02:38 fetching corpus: 5844, signal 9358/11896 (executing program) 1970/01/01 00:02:38 fetching corpus: 5894, signal 9436/11896 (executing program) 1970/01/01 00:02:38 fetching corpus: 5944, signal 9497/11896 (executing program) 1970/01/01 00:02:38 fetching corpus: 5994, signal 9568/11896 (executing program) 1970/01/01 00:02:38 fetching corpus: 6044, signal 9644/11896 (executing program) 1970/01/01 00:02:38 fetching corpus: 6094, signal 9702/11897 (executing program) 1970/01/01 00:02:38 fetching corpus: 6144, signal 9768/11898 (executing program) 1970/01/01 00:02:38 fetching corpus: 6194, signal 9833/11898 (executing program) 1970/01/01 00:02:38 fetching corpus: 6244, signal 9895/11899 (executing program) 1970/01/01 00:02:39 fetching corpus: 6294, signal 9977/11899 (executing program) 1970/01/01 00:02:39 fetching corpus: 6344, signal 10043/11899 (executing program) 1970/01/01 00:02:39 fetching corpus: 6394, signal 10109/11901 (executing program) 1970/01/01 00:02:39 fetching corpus: 6444, signal 10165/11901 (executing program) 1970/01/01 00:02:39 fetching corpus: 6494, signal 10235/11901 (executing program) 1970/01/01 00:02:39 fetching corpus: 6544, signal 10296/11901 (executing program) 1970/01/01 00:02:39 fetching corpus: 6594, signal 10358/11901 (executing program) 1970/01/01 00:02:39 fetching corpus: 6644, signal 10424/11901 (executing program) 1970/01/01 00:02:40 fetching corpus: 6694, signal 10489/11901 (executing program) 1970/01/01 00:02:40 fetching corpus: 6744, signal 10556/11901 (executing program) 1970/01/01 00:02:40 fetching corpus: 6794, signal 10624/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 6844, signal 10693/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 6894, signal 10761/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 6944, signal 10828/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 6994, signal 10898/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 7044, signal 10958/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 7094, signal 11022/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 7144, signal 11093/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 7194, signal 11149/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 7244, signal 11217/11904 (executing program) 1970/01/01 00:02:40 fetching corpus: 7294, signal 11285/11906 (executing program) 1970/01/01 00:02:40 fetching corpus: 7344, signal 11353/11907 (executing program) 1970/01/01 00:02:40 fetching corpus: 7394, signal 11409/11908 (executing program) 1970/01/01 00:02:41 fetching corpus: 7444, signal 11476/11908 (executing program) 1970/01/01 00:02:41 fetching corpus: 7494, signal 11549/11908 (executing program) 1970/01/01 00:02:41 fetching corpus: 7544, signal 11616/11910 (executing program) 1970/01/01 00:02:41 fetching corpus: 7594, signal 11684/11910 (executing program) 1970/01/01 00:02:41 fetching corpus: 7644, signal 11745/11910 (executing program) 1970/01/01 00:02:41 fetching corpus: 7694, signal 11805/11910 (executing program) 1970/01/01 00:02:41 fetching corpus: 7743, signal 11860/11910 (executing program) 1970/01/01 00:02:41 fetching corpus: 7748, signal 11865/11910 (executing program) 1970/01/01 00:02:41 fetching corpus: 7748, signal 11865/11910 (executing program) 1970/01/01 00:03:26 starting 2 fuzzer processes 00:03:29 executing program 0: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) [ 211.353265][ T3270] cgroup: Unknown subsys name 'hugetlb' 00:03:32 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 214.248006][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.286935][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.902835][ T3295] cgroup: Unknown subsys name 'hugetlb' [ 215.830584][ T3270] device hsr_slave_0 entered promiscuous mode [ 215.839127][ T3270] device hsr_slave_1 entered promiscuous mode [ 216.843550][ T3270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.883273][ T3270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.940145][ T3270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.052721][ T3270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.273196][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.320017][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.629704][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.699375][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.717185][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.620649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.637457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.689691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.699956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.819156][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.922828][ T3295] device hsr_slave_0 entered promiscuous mode [ 219.928764][ T3295] device hsr_slave_1 entered promiscuous mode [ 219.938207][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.939395][ T3295] Cannot create hsr debugfs directory [ 219.942651][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.079095][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.097921][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.148087][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.156382][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.304594][ T3270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.643756][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.663821][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.996187][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.043752][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.083252][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.114042][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.900363][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.977436][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.984518][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.155381][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.160450][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.974494][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.978025][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.013423][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.019595][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.134675][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.209831][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.215572][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.219350][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.249977][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.265901][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.278544][ T3270] device veth0_vlan entered promiscuous mode [ 224.405669][ T3270] device veth1_vlan entered promiscuous mode [ 224.462840][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.470560][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.488940][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.555719][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.565894][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.579242][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.634618][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.810517][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.818834][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.838603][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.842277][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.873496][ T3270] device veth0_macvtap entered promiscuous mode [ 224.912792][ T3270] device veth1_macvtap entered promiscuous mode [ 224.999525][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.019631][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.125140][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.137924][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.194427][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.200242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.264099][ T3270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.265427][ T3270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.265886][ T3270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.266292][ T3270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.949507][ T3270] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation 00:03:46 executing program 0: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 00:03:46 executing program 0: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 00:03:47 executing program 0: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) [ 228.145010][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.162851][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.112564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.120826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.149211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.160532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.191489][ T3295] device veth0_vlan entered promiscuous mode [ 229.256562][ T3295] device veth1_vlan entered promiscuous mode [ 229.388196][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.396583][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.425105][ T3295] device veth0_macvtap entered promiscuous mode [ 229.455376][ T3295] device veth1_macvtap entered promiscuous mode [ 229.613727][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.619455][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.632515][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.646499][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.696651][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.714848][ T2014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.747733][ T3295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.748303][ T3295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.748693][ T3295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.749078][ T3295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.704506][ T11] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 231.065062][ T11] usb 2-1: config 0 has no interfaces? [ 239.928992][ T3410] udc-core: couldn't find an available UDC or it's busy [ 239.929655][ T3410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 241.342908][ T11] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.343445][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.343770][ T11] usb 2-1: Product: syz [ 241.397764][ T11] usb 2-1: config 0 descriptor?? [ 241.422565][ T11] usb 2-1: can't set config #0, error -71 [ 241.438398][ T11] usb 2-1: USB disconnect, device number 2 [ 243.135621][ T3382] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 243.492073][ T3382] usb 2-1: config 0 has no interfaces? 00:04:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x95, 0x0, 0x0, 0x0, "8bf5e394af922a324ee8ba66835602f9ed2e1b6f3e6c5b0cbc17187a6500"}) [ 245.354149][ T3382] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.355464][ T3382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:04:04 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 245.435582][ T3382] usb 2-1: config 0 descriptor?? [ 245.453405][ T3382] usb 2-1: can't set config #0, error -71 [ 245.474262][ T3382] usb 2-1: USB disconnect, device number 3 00:04:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x95, 0x0, 0x0, 0x0, "8bf5e394af922a324ee8ba66835602f9ed2e1b6f3e6c5b0cbc17187a6500"}) [ 246.312741][ T3382] usb 2-1: new low-speed USB device number 4 using dummy_hcd 00:04:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x95, 0x0, 0x0, 0x0, "8bf5e394af922a324ee8ba66835602f9ed2e1b6f3e6c5b0cbc17187a6500"}) [ 246.683048][ T3382] usb 2-1: config 0 has no interfaces? 00:04:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x95, 0x0, 0x0, 0x0, "8bf5e394af922a324ee8ba66835602f9ed2e1b6f3e6c5b0cbc17187a6500"}) [ 255.497865][ T3424] udc-core: couldn't find an available UDC or it's busy [ 255.498424][ T3424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.012906][ T3382] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.013635][ T3382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.014047][ T3382] usb 2-1: Product: syz [ 257.029627][ T3382] usb 2-1: config 0 descriptor?? [ 257.053498][ T3382] usb 2-1: can't set config #0, error -71 [ 257.060137][ T3382] usb 2-1: USB disconnect, device number 4 00:04:18 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 00:04:18 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 259.252793][ T3382] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 259.352865][ T19] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 259.613574][ T3382] usb 1-1: config 0 has no interfaces? [ 259.803693][ T19] usb 2-1: config 0 has no interfaces? [ 268.429252][ T3431] udc-core: couldn't find an available UDC or it's busy [ 268.429703][ T3431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.550638][ T3432] udc-core: couldn't find an available UDC or it's busy [ 268.552041][ T3432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.791935][ C0] hrtimer: interrupt took 693104 ns [ 269.894355][ T3382] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.894934][ T3382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.895344][ T3382] usb 1-1: Product: syz [ 269.939822][ T3382] usb 1-1: config 0 descriptor?? [ 269.960695][ T3382] usb 1-1: can't set config #0, error -71 [ 270.080691][ T3382] usb 1-1: USB disconnect, device number 2 [ 270.242421][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.243205][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.243700][ T19] usb 2-1: Product: syz [ 270.284563][ T19] usb 2-1: config 0 descriptor?? [ 270.312550][ T19] usb 2-1: can't set config #0, error -71 [ 270.318610][ T19] usb 2-1: USB disconnect, device number 5 00:04:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 00:04:31 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 272.335408][ T11] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 272.693553][ T11] usb 1-1: config 0 has no interfaces? [ 272.714682][ T3382] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 273.075021][ T3382] usb 2-1: config 0 has no interfaces? [ 281.623687][ T3446] udc-core: couldn't find an available UDC or it's busy [ 281.625981][ T3446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 281.965201][ T3447] udc-core: couldn't find an available UDC or it's busy [ 281.965820][ T3447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 283.013384][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.014114][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.014571][ T11] usb 1-1: Product: syz [ 283.042030][ T11] usb 1-1: config 0 descriptor?? [ 283.063017][ T11] usb 1-1: can't set config #0, error -71 [ 283.103276][ T11] usb 1-1: USB disconnect, device number 3 [ 283.333231][ T3382] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.333851][ T3382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.334333][ T3382] usb 2-1: Product: syz [ 283.366527][ T3382] usb 2-1: config 0 descriptor?? [ 283.382745][ T3382] usb 2-1: can't set config #0, error -71 [ 283.396484][ T3382] usb 2-1: USB disconnect, device number 6 00:04:44 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 00:04:44 executing program 1: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = getuid() r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) [ 285.413181][ T11] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 285.785817][ T11] usb 1-1: config 0 has no interfaces? 00:04:47 executing program 1: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = getuid() r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 00:04:50 executing program 1: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = getuid() r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) [ 294.667920][ T3462] udc-core: couldn't find an available UDC or it's busy [ 294.668568][ T3462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.083777][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.084322][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.084676][ T11] usb 1-1: Product: syz [ 296.107201][ T11] usb 1-1: config 0 descriptor?? [ 296.123488][ T11] usb 1-1: can't set config #0, error -71 [ 296.149082][ T11] usb 1-1: USB disconnect, device number 4 00:04:57 executing program 1: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = getuid() r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 00:04:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 00:04:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 00:04:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 00:04:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 00:04:59 executing program 1: r0 = io_uring_setup(0x1da4, &(0x7f0000000200)) r1 = io_uring_setup(0x3fe9, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r1, 0x0, 0x7826, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r2, r0, 0x0) 00:05:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) 00:05:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) 00:05:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) [ 302.186649][ T3487] 8<--- cut here --- [ 302.187873][ T3487] Unable to handle kernel NULL pointer dereference at virtual address 000000a0 [ 302.208752][ T3487] pgd = 86c01f00 [ 302.209244][ T3487] [000000a0] *pgd=86bb6003, *pmd=fe52e003 [ 302.210544][ T3487] Internal error: Oops: 207 [#1] PREEMPT SMP ARM [ 302.210937][ T3487] Modules linked in: [ 302.211490][ T3487] CPU: 0 PID: 3487 Comm: iou-sqp-3476 Not tainted 5.12.0-rc3-syzkaller #0 [ 302.211888][ T3487] Hardware name: ARM-Versatile Express [ 302.212451][ T3487] PC is at io_uring_cancel_sqpoll+0xac/0x1a0 [ 302.213519][ T3487] LR is at io_sq_thread+0x3d0/0x6f8 [ 302.213979][ T3487] pc : [<80561f00>] lr : [<80566f50>] psr: 60000013 [ 302.214182][ T3487] sp : 86273ee0 ip : 86b44100 fp : 86273f2c [ 302.214380][ T3487] r10: 00000000 r9 : 86272000 r8 : 00000000 [ 302.214571][ T3487] r7 : 86b83000 r6 : 86bb1b00 r5 : 86bb1b54 r4 : 86b83000 [ 302.214915][ T3487] r3 : 000000a0 r2 : 86272000 r1 : 000000a0 r0 : 86273ef4 [ 302.215396][ T3487] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 302.215715][ T3487] Control: 30c5387d Table: 86c01f00 DAC: fffffffd [ 302.215979][ T3487] Process iou-sqp-3476 (pid: 3487, stack limit = 0x86272210) [ 302.216276][ T3487] Stack: (0x86273ee0 to 0x86274000) [ 302.216670][ T3487] 3ee0: 00000000 000000a0 00000000 86b44100 802a6878 86273ef4 86273ef4 56b92eae [ 302.217431][ T3487] 3f00: 00000001 86b83000 86bb1b54 86bb1b00 00000000 00000000 86272000 00000000 [ 302.217699][ T3487] 3f20: 86273fac 86273f30 80566f50 80561e60 86bb1b04 81f744cc 82a06d00 00000000 [ 302.217935][ T3487] 3f40: 80384db8 86bb1b00 855ecd00 86bb1b54 00000000 00000000 00000000 86b44100 [ 302.218147][ T3487] 3f60: 802a6878 86273f64 86273f64 2d756f69 2d707173 36373433 80258400 56b92eae [ 302.218488][ T3487] 3f80: 00000000 86bb1b00 80566b80 00000000 00000000 00000000 00000000 00000000 [ 302.218807][ T3487] 3fa0: 00000000 86273fb0 80200114 80566b8c 00000000 00000000 00000000 00000000 [ 302.219266][ T3487] 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 302.219586][ T3487] 3fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000 [ 302.219863][ T3487] Backtrace: [ 302.220163][ T3487] [<80561e54>] (io_uring_cancel_sqpoll) from [<80566f50>] (io_sq_thread+0x3d0/0x6f8) [ 302.220833][ T3487] r10:00000000 r9:86272000 r8:00000000 r7:00000000 r6:86bb1b00 r5:86bb1b54 [ 302.223677][ T3487] r4:86b83000 [ 302.223917][ T3487] [<80566b80>] (io_sq_thread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 302.224227][ T3487] Exception stack(0x86273fb0 to 0x86273ff8) [ 302.224455][ T3487] 3fa0: 00000000 00000000 00000000 00000000 [ 302.224688][ T3487] 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 302.224896][ T3487] 3fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 302.225085][ T3487] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80566b80 [ 302.225283][ T3487] r4:86bb1b00 [ 302.225987][ T3487] Code: e28830a0 e50b3048 f593f000 e1a01003 (e1913f9f) [ 302.243078][ T3487] ---[ end trace 672994d7a976de61 ]--- [ 302.243949][ T3487] Kernel panic - not syncing: Fatal exception [ 302.244421][ C1] CPU1: stopping [ 302.245047][ C1] CPU: 1 PID: 3055 Comm: klogd Tainted: G D 5.12.0-rc3-syzkaller #0 [ 302.245940][ C1] Hardware name: ARM-Versatile Express [ 302.246623][ C1] Backtrace: [ 302.247684][ C1] [<81802550>] (dump_backtrace) from [<818027c4>] (show_stack+0x18/0x1c) [ 302.249174][ C1] r7:00000080 r6:600f0193 r5:00000000 r4:82b58344 [ 302.249711][ C1] [<818027ac>] (show_stack) from [<81809e98>] (dump_stack+0xb8/0xe8) [ 302.250286][ C1] [<81809de0>] (dump_stack) from [<802111fc>] (do_handle_IPI+0x414/0x440) [ 302.250738][ C1] r7:8340ccc0 r6:00000001 r5:00000014 r4:00000004 [ 302.251267][ C1] [<80210de8>] (do_handle_IPI) from [<80211248>] (ipi_handler+0x20/0x28) [ 302.251697][ C1] r9:85857d40 r8:85857ca8 r7:8340ccc0 r6:82a22c34 r5:00000014 r4:8348a000 [ 302.252296][ C1] [<80211228>] (ipi_handler) from [<802df904>] (handle_percpu_devid_irq+0xa4/0x19c) [ 302.252898][ C1] [<802df860>] (handle_percpu_devid_irq) from [<802d8730>] (__handle_domain_irq+0xb0/0x120) [ 302.253623][ C1] r10:85857cd8 r9:85857d40 r8:00000001 r7:00000000 r6:828ad498 r5:00000000 [ 302.253860][ C1] r4:828ad498 r3:00010000 [ 302.254036][ C1] [<802d8680>] (__handle_domain_irq) from [<8088af70>] (gic_handle_irq+0x84/0xac) [ 302.254326][ C1] r10:86813480 r9:400f0193 r8:e000200c r7:828ad4bc r6:e0002000 r5:85857d40 [ 302.254589][ C1] r4:82a22c34 [ 302.254818][ C1] [<8088aeec>] (gic_handle_irq) from [<80200abc>] (__irq_svc+0x5c/0x94) [ 302.255430][ C1] Exception stack(0x85857d40 to 0x85857d88) [ 302.255925][ C1] 7d40: 00000000 86813480 00000000 803f2358 00000000 86813480 00000001 81604fd4 [ 302.256470][ C1] 7d60: 85808000 00000000 86813480 85857dfc 85857d70 85857d90 81381ca0 802eb3a4 [ 302.257034][ C1] 7d80: 600f0013 ffffffff [ 302.257409][ C1] r9:85856000 r8:85808000 r7:85857d74 r6:ffffffff r5:600f0013 r4:802eb3a4 [ 302.257671][ C1] [<81381c48>] (sk_filter_trim_cap) from [<81604fd4>] (unix_dgram_sendmsg+0x3b8/0x89c) [ 302.258046][ C1] r10:86813480 r9:00000000 r8:858084c0 r7:85808000 r6:00000084 r5:8388e080 [ 302.258484][ C1] r4:fffffe00 [ 302.258733][ C1] [<81604c1c>] (unix_dgram_sendmsg) from [<81321f54>] (sock_sendmsg+0x3c/0x4c) [ 302.259309][ C1] r10:00000121 r9:85856000 r8:80200224 r7:00004000 r6:00000000 r5:8388e080 [ 302.259851][ C1] r4:85857eb8 [ 302.260093][ C1] [<81321f18>] (sock_sendmsg) from [<813247e8>] (__sys_sendto+0xcc/0x118) [ 302.260633][ C1] r5:8388e080 r4:00000000 [ 302.260980][ C1] [<8132471c>] (__sys_sendto) from [<81324878>] (sys_send+0x20/0x28) [ 302.261609][ C1] r7:00000121 r6:00000001 r5:76f77080 r4:00d9e190 [ 302.262032][ C1] [<81324858>] (sys_send) from [<80200060>] (ret_fast_syscall+0x0/0x2c) [ 302.262556][ C1] Exception stack(0x85857fa8 to 0x85857ff0) [ 302.263038][ C1] 7fa0: 00d9e190 76f77080 00000003 00da2e40 00000084 00004000 [ 302.263575][ C1] 7fc0: 00d9e190 76f77080 00000001 00000121 7edf7cd0 00000000 76f77080 00000000 [ 302.264186][ C1] 7fe0: 00000000 7edf7c08 76ea8b88 76eade78 [ 302.265248][ T3487] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:13:40 Registers: info registers vcpu 0 R00=830dd90c R01=00008c4b R02=00008c4b R03=830dde08 R04=831b6e54 R05=82c6d2c8 R06=00000018 R07=802b6804 R08=86273acc R09=82e8f758 R10=82e93758 R11=86273a64 R12=86273a20 R13=86273a20 R14=802b6da8 R15=802b6da8 PSR=a0000193 N-C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 R00=ff79ba00 R01=00000000 R02=00000000 R03=8114c2a0 R04=82b0cdd8 R05=82b0cdc0 R06=00000028 R07=00000006 R08=82b0cdd8 R09=00000000 R10=82a406b0 R11=83523e04 R12=83523e08 R13=83523df8 R14=8031eb28 R15=8114c2b0 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000