syzkaller login: [ 259.404773][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 259.430862][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 259.479868][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 276.323114][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:35365' (ECDSA) to the list of known hosts. 1970/01/01 00:05:16 fuzzer started 1970/01/01 00:05:30 dialing manager at localhost:41637 [ 341.413847][ T2032] cgroup: Unknown subsys name 'net' [ 342.295860][ T2032] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:42 syscalls: 2822 1970/01/01 00:05:42 code coverage: enabled 1970/01/01 00:05:42 comparison tracing: enabled 1970/01/01 00:05:42 extra coverage: enabled 1970/01/01 00:05:42 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:42 setuid sandbox: enabled 1970/01/01 00:05:42 namespace sandbox: enabled 1970/01/01 00:05:42 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:42 fault injection: enabled 1970/01/01 00:05:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:42 net packet injection: enabled 1970/01/01 00:05:42 net device setup: enabled 1970/01/01 00:05:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:42 USB emulation: enabled 1970/01/01 00:05:42 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:42 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:42 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:42 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:05:47 fetching corpus: 50, signal 29151/32766 (executing program) 1970/01/01 00:05:51 fetching corpus: 100, signal 43805/48920 (executing program) 1970/01/01 00:05:56 fetching corpus: 150, signal 55009/61499 (executing program) 1970/01/01 00:05:59 fetching corpus: 200, signal 61780/69642 (executing program) 1970/01/01 00:06:02 fetching corpus: 250, signal 69234/78378 (executing program) 1970/01/01 00:06:04 fetching corpus: 300, signal 73703/84107 (executing program) 1970/01/01 00:06:06 fetching corpus: 349, signal 78744/90339 (executing program) 1970/01/01 00:06:08 fetching corpus: 399, signal 82408/95269 (executing program) 1970/01/01 00:06:11 fetching corpus: 448, signal 86619/100576 (executing program) 1970/01/01 00:06:14 fetching corpus: 498, signal 90535/105581 (executing program) 1970/01/01 00:06:19 fetching corpus: 548, signal 93418/109622 (executing program) 1970/01/01 00:06:21 fetching corpus: 597, signal 94867/112282 (executing program) 1970/01/01 00:06:23 fetching corpus: 647, signal 98405/116837 (executing program) 1970/01/01 00:06:26 fetching corpus: 696, signal 101160/120589 (executing program) 1970/01/01 00:06:28 fetching corpus: 746, signal 103852/124314 (executing program) 1970/01/01 00:06:31 fetching corpus: 795, signal 106012/127489 (executing program) 1970/01/01 00:06:34 fetching corpus: 845, signal 108733/131109 (executing program) 1970/01/01 00:06:37 fetching corpus: 894, signal 111282/134547 (executing program) 1970/01/01 00:06:40 fetching corpus: 943, signal 113828/137958 (executing program) 1970/01/01 00:06:42 fetching corpus: 992, signal 115668/140772 (executing program) 1970/01/01 00:06:44 fetching corpus: 1041, signal 119068/144876 (executing program) 1970/01/01 00:06:46 fetching corpus: 1091, signal 120822/147554 (executing program) 1970/01/01 00:06:50 fetching corpus: 1141, signal 122587/150155 (executing program) 1970/01/01 00:06:52 fetching corpus: 1189, signal 125554/153735 (executing program) 1970/01/01 00:06:54 fetching corpus: 1238, signal 127192/156211 (executing program) 1970/01/01 00:06:57 fetching corpus: 1288, signal 128526/158457 (executing program) 1970/01/01 00:06:59 fetching corpus: 1338, signal 129962/160741 (executing program) 1970/01/01 00:07:01 fetching corpus: 1386, signal 131516/163055 (executing program) 1970/01/01 00:07:03 fetching corpus: 1435, signal 133003/165297 (executing program) 1970/01/01 00:07:06 fetching corpus: 1484, signal 134270/167393 (executing program) 1970/01/01 00:07:09 fetching corpus: 1534, signal 135576/169506 (executing program) 1970/01/01 00:07:12 fetching corpus: 1583, signal 137121/171763 (executing program) 1970/01/01 00:07:14 fetching corpus: 1633, signal 138668/174039 (executing program) 1970/01/01 00:07:16 fetching corpus: 1683, signal 139551/175737 (executing program) 1970/01/01 00:07:18 fetching corpus: 1733, signal 140779/177684 (executing program) 1970/01/01 00:07:21 fetching corpus: 1783, signal 142011/179629 (executing program) 1970/01/01 00:07:24 fetching corpus: 1833, signal 143922/182036 (executing program) 1970/01/01 00:07:26 fetching corpus: 1882, signal 145413/184120 (executing program) 1970/01/01 00:07:28 fetching corpus: 1932, signal 147038/186295 (executing program) 1970/01/01 00:07:30 fetching corpus: 1982, signal 148156/188072 (executing program) 1970/01/01 00:07:32 fetching corpus: 2032, signal 149464/189939 (executing program) 1970/01/01 00:07:36 fetching corpus: 2082, signal 151073/192022 (executing program) 1970/01/01 00:07:39 fetching corpus: 2132, signal 151878/193550 (executing program) 1970/01/01 00:07:42 fetching corpus: 2182, signal 153253/195459 (executing program) 1970/01/01 00:07:44 fetching corpus: 2232, signal 154475/197212 (executing program) 1970/01/01 00:07:47 fetching corpus: 2281, signal 155556/198889 (executing program) 1970/01/01 00:07:50 fetching corpus: 2329, signal 156708/200594 (executing program) 1970/01/01 00:07:52 fetching corpus: 2379, signal 157718/202147 (executing program) 1970/01/01 00:07:54 fetching corpus: 2429, signal 158646/203695 (executing program) 1970/01/01 00:07:57 fetching corpus: 2479, signal 159801/205337 (executing program) 1970/01/01 00:07:59 fetching corpus: 2528, signal 160895/206932 (executing program) 1970/01/01 00:08:01 fetching corpus: 2577, signal 161997/208521 (executing program) 1970/01/01 00:08:04 fetching corpus: 2627, signal 163019/210012 (executing program) 1970/01/01 00:08:06 fetching corpus: 2677, signal 164165/211615 (executing program) 1970/01/01 00:08:11 fetching corpus: 2727, signal 165890/213544 (executing program) 1970/01/01 00:08:15 fetching corpus: 2777, signal 166781/214970 (executing program) 1970/01/01 00:08:18 fetching corpus: 2826, signal 168103/216623 (executing program) 1970/01/01 00:08:20 fetching corpus: 2875, signal 168901/217927 (executing program) 1970/01/01 00:08:24 fetching corpus: 2924, signal 169781/219270 (executing program) 1970/01/01 00:08:26 fetching corpus: 2973, signal 170623/220557 (executing program) 1970/01/01 00:08:29 fetching corpus: 3023, signal 171447/221855 (executing program) 1970/01/01 00:08:32 fetching corpus: 3073, signal 172361/223164 (executing program) 1970/01/01 00:08:34 fetching corpus: 3123, signal 173322/224541 (executing program) 1970/01/01 00:08:36 fetching corpus: 3173, signal 174275/225839 (executing program) 1970/01/01 00:08:38 fetching corpus: 3223, signal 175144/227086 (executing program) 1970/01/01 00:08:40 fetching corpus: 3272, signal 175953/228262 (executing program) 1970/01/01 00:08:43 fetching corpus: 3322, signal 176732/229434 (executing program) 1970/01/01 00:08:46 fetching corpus: 3371, signal 177794/230773 (executing program) 1970/01/01 00:08:48 fetching corpus: 3421, signal 178856/232103 (executing program) 1970/01/01 00:08:51 fetching corpus: 3471, signal 179751/233282 (executing program) 1970/01/01 00:08:54 fetching corpus: 3521, signal 180550/234480 (executing program) 1970/01/01 00:08:56 fetching corpus: 3571, signal 181394/235721 (executing program) 1970/01/01 00:08:59 fetching corpus: 3621, signal 182364/236976 (executing program) 1970/01/01 00:09:01 fetching corpus: 3670, signal 182890/237964 (executing program) 1970/01/01 00:09:04 fetching corpus: 3720, signal 183539/239010 (executing program) 1970/01/01 00:09:06 fetching corpus: 3769, signal 184154/240058 (executing program) 1970/01/01 00:09:09 fetching corpus: 3819, signal 185686/241452 (executing program) 1970/01/01 00:09:11 fetching corpus: 3866, signal 186276/242478 (executing program) 1970/01/01 00:09:13 fetching corpus: 3916, signal 187095/243534 (executing program) 1970/01/01 00:09:15 fetching corpus: 3966, signal 188032/244633 (executing program) 1970/01/01 00:09:18 fetching corpus: 4015, signal 188704/245616 (executing program) 1970/01/01 00:09:20 fetching corpus: 4064, signal 189313/246570 (executing program) 1970/01/01 00:09:22 fetching corpus: 4114, signal 190001/247547 (executing program) 1970/01/01 00:09:23 fetching corpus: 4164, signal 190754/248551 (executing program) 1970/01/01 00:09:25 fetching corpus: 4214, signal 191453/249520 (executing program) 1970/01/01 00:09:27 fetching corpus: 4264, signal 192265/250558 (executing program) 1970/01/01 00:09:30 fetching corpus: 4313, signal 192979/251528 (executing program) 1970/01/01 00:09:32 fetching corpus: 4362, signal 194101/252583 (executing program) 1970/01/01 00:09:34 fetching corpus: 4412, signal 194775/253473 (executing program) 1970/01/01 00:09:36 fetching corpus: 4461, signal 195793/254481 (executing program) 1970/01/01 00:09:38 fetching corpus: 4511, signal 196587/255390 (executing program) 1970/01/01 00:09:41 fetching corpus: 4560, signal 197368/256306 (executing program) 1970/01/01 00:09:43 fetching corpus: 4610, signal 197988/257150 (executing program) 1970/01/01 00:09:44 fetching corpus: 4660, signal 198498/257962 (executing program) 1970/01/01 00:09:47 fetching corpus: 4709, signal 199180/258809 (executing program) 1970/01/01 00:09:50 fetching corpus: 4758, signal 199813/259631 (executing program) 1970/01/01 00:09:52 fetching corpus: 4808, signal 200746/260512 (executing program) 1970/01/01 00:09:55 fetching corpus: 4856, signal 202666/261690 (executing program) 1970/01/01 00:09:59 fetching corpus: 4906, signal 203524/262525 (executing program) 1970/01/01 00:10:03 fetching corpus: 4956, signal 204208/263338 (executing program) 1970/01/01 00:10:05 fetching corpus: 5005, signal 204808/264073 (executing program) 1970/01/01 00:10:07 fetching corpus: 5055, signal 205445/264810 (executing program) 1970/01/01 00:10:09 fetching corpus: 5103, signal 206401/265677 (executing program) 1970/01/01 00:10:12 fetching corpus: 5153, signal 206978/266384 (executing program) 1970/01/01 00:10:15 fetching corpus: 5202, signal 207629/267114 (executing program) 1970/01/01 00:10:17 fetching corpus: 5251, signal 208231/267859 (executing program) 1970/01/01 00:10:18 fetching corpus: 5301, signal 208889/268594 (executing program) 1970/01/01 00:10:20 fetching corpus: 5350, signal 209427/269289 (executing program) 1970/01/01 00:10:22 fetching corpus: 5399, signal 209916/269953 (executing program) 1970/01/01 00:10:24 fetching corpus: 5447, signal 210442/270599 (executing program) 1970/01/01 00:10:27 fetching corpus: 5496, signal 210743/271176 (executing program) 1970/01/01 00:10:29 fetching corpus: 5545, signal 211200/271814 (executing program) 1970/01/01 00:10:32 fetching corpus: 5595, signal 211993/272520 (executing program) 1970/01/01 00:10:34 fetching corpus: 5644, signal 212470/273136 (executing program) 1970/01/01 00:10:36 fetching corpus: 5694, signal 212971/273781 (executing program) 1970/01/01 00:10:40 fetching corpus: 5743, signal 213586/274416 (executing program) 1970/01/01 00:10:43 fetching corpus: 5792, signal 214062/275030 (executing program) 1970/01/01 00:10:45 fetching corpus: 5841, signal 214481/275565 (executing program) 1970/01/01 00:10:48 fetching corpus: 5891, signal 214994/276206 (executing program) 1970/01/01 00:10:50 fetching corpus: 5940, signal 215357/276787 (executing program) 1970/01/01 00:10:52 fetching corpus: 5989, signal 215755/277373 (executing program) 1970/01/01 00:10:54 fetching corpus: 6038, signal 216293/277948 (executing program) 1970/01/01 00:10:55 fetching corpus: 6087, signal 216676/278489 (executing program) 1970/01/01 00:10:57 fetching corpus: 6136, signal 217024/279053 (executing program) 1970/01/01 00:11:00 fetching corpus: 6185, signal 217493/279585 (executing program) 1970/01/01 00:11:04 fetching corpus: 6232, signal 217953/280142 (executing program) 1970/01/01 00:11:08 fetching corpus: 6280, signal 218363/280693 (executing program) 1970/01/01 00:11:09 fetching corpus: 6329, signal 218720/281211 (executing program) 1970/01/01 00:11:11 fetching corpus: 6378, signal 219142/281737 (executing program) 1970/01/01 00:11:12 fetching corpus: 6428, signal 219832/282288 (executing program) 1970/01/01 00:11:14 fetching corpus: 6478, signal 220403/282824 (executing program) 1970/01/01 00:11:16 fetching corpus: 6527, signal 220779/283331 (executing program) 1970/01/01 00:11:19 fetching corpus: 6577, signal 221206/283813 (executing program) 1970/01/01 00:11:23 fetching corpus: 6627, signal 221636/284302 (executing program) 1970/01/01 00:11:25 fetching corpus: 6677, signal 222318/284797 (executing program) 1970/01/01 00:11:27 fetching corpus: 6725, signal 222808/285281 (executing program) 1970/01/01 00:11:29 fetching corpus: 6775, signal 223256/285752 (executing program) 1970/01/01 00:11:31 fetching corpus: 6825, signal 223695/286242 (executing program) 1970/01/01 00:11:33 fetching corpus: 6873, signal 224098/286689 (executing program) 1970/01/01 00:11:36 fetching corpus: 6920, signal 224524/287132 (executing program) 1970/01/01 00:11:39 fetching corpus: 6970, signal 225263/287575 (executing program) 1970/01/01 00:11:41 fetching corpus: 7019, signal 225611/288003 (executing program) 1970/01/01 00:11:43 fetching corpus: 7068, signal 226003/288445 (executing program) 1970/01/01 00:11:45 fetching corpus: 7117, signal 226526/288582 (executing program) 1970/01/01 00:11:47 fetching corpus: 7167, signal 227065/288582 (executing program) 1970/01/01 00:11:50 fetching corpus: 7217, signal 227818/288584 (executing program) 1970/01/01 00:11:52 fetching corpus: 7266, signal 228361/288584 (executing program) 1970/01/01 00:11:56 fetching corpus: 7315, signal 228870/288588 (executing program) 1970/01/01 00:11:58 fetching corpus: 7364, signal 229347/288595 (executing program) 1970/01/01 00:12:00 fetching corpus: 7411, signal 229780/288595 (executing program) 1970/01/01 00:12:02 fetching corpus: 7459, signal 230128/288595 (executing program) 1970/01/01 00:12:05 fetching corpus: 7509, signal 230693/288595 (executing program) 1970/01/01 00:12:07 fetching corpus: 7558, signal 231166/288597 (executing program) 1970/01/01 00:12:12 fetching corpus: 7608, signal 231627/288612 (executing program) 1970/01/01 00:12:15 fetching corpus: 7658, signal 232152/288623 (executing program) 1970/01/01 00:12:17 fetching corpus: 7708, signal 232678/288643 (executing program) 1970/01/01 00:12:18 fetching corpus: 7757, signal 233130/288643 (executing program) 1970/01/01 00:12:20 fetching corpus: 7807, signal 233454/288643 (executing program) 1970/01/01 00:12:21 fetching corpus: 7857, signal 233907/288643 (executing program) 1970/01/01 00:12:23 fetching corpus: 7907, signal 234386/288643 (executing program) 1970/01/01 00:12:24 fetching corpus: 7956, signal 234766/288643 (executing program) 1970/01/01 00:12:29 fetching corpus: 8005, signal 235227/288643 (executing program) 1970/01/01 00:12:32 fetching corpus: 8054, signal 235788/288647 (executing program) 1970/01/01 00:12:34 fetching corpus: 8104, signal 236200/288651 (executing program) 1970/01/01 00:12:36 fetching corpus: 8153, signal 236601/288662 (executing program) 1970/01/01 00:12:38 fetching corpus: 8203, signal 237087/288711 (executing program) 1970/01/01 00:12:40 fetching corpus: 8253, signal 237506/288715 (executing program) 1970/01/01 00:12:41 fetching corpus: 8301, signal 238022/288717 (executing program) 1970/01/01 00:12:43 fetching corpus: 8351, signal 238369/288717 (executing program) 1970/01/01 00:12:46 fetching corpus: 8401, signal 238952/288719 (executing program) 1970/01/01 00:12:49 fetching corpus: 8450, signal 239232/288721 (executing program) 1970/01/01 00:12:51 fetching corpus: 8499, signal 239648/288729 (executing program) 1970/01/01 00:12:53 fetching corpus: 8547, signal 240030/288729 (executing program) 1970/01/01 00:12:54 fetching corpus: 8596, signal 240496/288729 (executing program) 1970/01/01 00:12:56 fetching corpus: 8646, signal 241016/288729 (executing program) 1970/01/01 00:12:58 fetching corpus: 8696, signal 241426/288730 (executing program) 1970/01/01 00:12:59 fetching corpus: 8746, signal 241815/288730 (executing program) 1970/01/01 00:13:02 fetching corpus: 8793, signal 242307/288730 (executing program) 1970/01/01 00:13:04 fetching corpus: 8842, signal 242796/288732 (executing program) 1970/01/01 00:13:06 fetching corpus: 8892, signal 243105/288736 (executing program) 1970/01/01 00:13:07 fetching corpus: 8939, signal 243742/288736 (executing program) 1970/01/01 00:13:09 fetching corpus: 8989, signal 244118/288740 (executing program) 1970/01/01 00:13:11 fetching corpus: 9038, signal 244461/288744 (executing program) 1970/01/01 00:13:15 fetching corpus: 9087, signal 244900/288744 (executing program) 1970/01/01 00:13:18 fetching corpus: 9137, signal 245416/288745 (executing program) 1970/01/01 00:13:22 fetching corpus: 9186, signal 245792/288753 (executing program) 1970/01/01 00:13:25 fetching corpus: 9234, signal 246240/288757 (executing program) 1970/01/01 00:13:27 fetching corpus: 9283, signal 246640/288761 (executing program) 1970/01/01 00:13:29 fetching corpus: 9333, signal 246927/288763 (executing program) 1970/01/01 00:13:31 fetching corpus: 9382, signal 247291/288763 (executing program) 1970/01/01 00:13:33 fetching corpus: 9431, signal 247595/288764 (executing program) 1970/01/01 00:13:34 fetching corpus: 9481, signal 247986/288764 (executing program) 1970/01/01 00:13:38 fetching corpus: 9531, signal 248486/288772 (executing program) 1970/01/01 00:13:41 fetching corpus: 9581, signal 248771/288772 (executing program) 1970/01/01 00:13:43 fetching corpus: 9629, signal 249058/288777 (executing program) 1970/01/01 00:13:45 fetching corpus: 9679, signal 249381/288782 (executing program) 1970/01/01 00:13:47 fetching corpus: 9728, signal 249844/288782 (executing program) 1970/01/01 00:13:48 fetching corpus: 9777, signal 250248/288782 (executing program) 1970/01/01 00:13:50 fetching corpus: 9827, signal 250618/288785 (executing program) 1970/01/01 00:13:52 fetching corpus: 9875, signal 251026/288785 (executing program) 1970/01/01 00:13:55 fetching corpus: 9921, signal 251326/288787 (executing program) 1970/01/01 00:13:57 fetching corpus: 9969, signal 251626/288787 (executing program) 1970/01/01 00:13:59 fetching corpus: 10019, signal 252063/288787 (executing program) 1970/01/01 00:14:01 fetching corpus: 10068, signal 252389/288788 (executing program) 1970/01/01 00:14:03 fetching corpus: 10118, signal 252817/288788 (executing program) 1970/01/01 00:14:05 fetching corpus: 10167, signal 253110/288790 (executing program) 1970/01/01 00:14:07 fetching corpus: 10216, signal 253349/288790 (executing program) 1970/01/01 00:14:09 fetching corpus: 10266, signal 253828/288790 (executing program) 1970/01/01 00:14:13 fetching corpus: 10315, signal 254313/288794 (executing program) 1970/01/01 00:14:16 fetching corpus: 10364, signal 254565/288795 (executing program) 1970/01/01 00:14:19 fetching corpus: 10409, signal 254963/288805 (executing program) 1970/01/01 00:14:22 fetching corpus: 10457, signal 255339/288809 (executing program) 1970/01/01 00:14:24 fetching corpus: 10506, signal 255657/288809 (executing program) 1970/01/01 00:14:26 fetching corpus: 10556, signal 255980/288812 (executing program) 1970/01/01 00:14:29 fetching corpus: 10606, signal 256358/288812 (executing program) 1970/01/01 00:14:30 fetching corpus: 10654, signal 256705/288815 (executing program) 1970/01/01 00:14:32 fetching corpus: 10704, signal 256998/288818 (executing program) 1970/01/01 00:14:34 fetching corpus: 10754, signal 257448/288818 (executing program) 1970/01/01 00:14:37 fetching corpus: 10803, signal 257773/288820 (executing program) 1970/01/01 00:14:41 fetching corpus: 10852, signal 258142/288820 (executing program) 1970/01/01 00:14:44 fetching corpus: 10900, signal 258718/288820 (executing program) 1970/01/01 00:14:45 fetching corpus: 10949, signal 258929/288820 (executing program) 1970/01/01 00:14:48 fetching corpus: 10997, signal 259329/288820 (executing program) 1970/01/01 00:14:50 fetching corpus: 11047, signal 259597/288820 (executing program) 1970/01/01 00:14:52 fetching corpus: 11096, signal 259912/288820 (executing program) 1970/01/01 00:14:53 fetching corpus: 11146, signal 260347/288834 (executing program) 1970/01/01 00:14:56 fetching corpus: 11196, signal 260618/288834 (executing program) 1970/01/01 00:14:59 fetching corpus: 11246, signal 260911/288846 (executing program) 1970/01/01 00:15:01 fetching corpus: 11296, signal 261212/288846 (executing program) 1970/01/01 00:15:04 fetching corpus: 11345, signal 261560/288846 (executing program) 1970/01/01 00:15:06 fetching corpus: 11394, signal 261920/288846 (executing program) 1970/01/01 00:15:08 fetching corpus: 11444, signal 262241/288846 (executing program) 1970/01/01 00:15:10 fetching corpus: 11491, signal 262547/288846 (executing program) 1970/01/01 00:15:11 fetching corpus: 11539, signal 262754/288854 (executing program) 1970/01/01 00:15:14 fetching corpus: 11589, signal 263160/288854 (executing program) 1970/01/01 00:15:16 fetching corpus: 11637, signal 263632/288867 (executing program) 1970/01/01 00:15:20 fetching corpus: 11687, signal 263997/288869 (executing program) 1970/01/01 00:15:22 fetching corpus: 11733, signal 265199/288869 (executing program) 1970/01/01 00:15:24 fetching corpus: 11780, signal 265531/288869 (executing program) 1970/01/01 00:15:26 fetching corpus: 11828, signal 265891/288869 (executing program) 1970/01/01 00:15:28 fetching corpus: 11877, signal 266270/288869 (executing program) 1970/01/01 00:15:30 fetching corpus: 11927, signal 266676/288874 (executing program) 1970/01/01 00:15:32 fetching corpus: 11976, signal 267026/288874 (executing program) 1970/01/01 00:15:34 fetching corpus: 12025, signal 267334/288884 (executing program) 1970/01/01 00:15:37 fetching corpus: 12075, signal 267563/288885 (executing program) 1970/01/01 00:15:40 fetching corpus: 12123, signal 268001/288885 (executing program) 1970/01/01 00:15:43 fetching corpus: 12171, signal 268372/288885 (executing program) 1970/01/01 00:15:45 fetching corpus: 12218, signal 268861/288891 (executing program) 1970/01/01 00:15:47 fetching corpus: 12267, signal 269141/288891 (executing program) 1970/01/01 00:15:49 fetching corpus: 12317, signal 269625/288891 (executing program) 1970/01/01 00:15:52 fetching corpus: 12367, signal 270047/288905 (executing program) 1970/01/01 00:15:54 fetching corpus: 12415, signal 270349/288905 (executing program) 1970/01/01 00:15:55 fetching corpus: 12465, signal 270675/288905 (executing program) 1970/01/01 00:15:58 fetching corpus: 12514, signal 270903/288905 (executing program) 1970/01/01 00:16:01 fetching corpus: 12564, signal 271156/288905 (executing program) 1970/01/01 00:16:05 fetching corpus: 12612, signal 271577/288905 (executing program) 1970/01/01 00:16:07 fetching corpus: 12661, signal 271835/288908 (executing program) 1970/01/01 00:16:08 fetching corpus: 12711, signal 272067/288916 (executing program) 1970/01/01 00:16:09 fetching corpus: 12760, signal 272308/288916 (executing program) 1970/01/01 00:16:12 fetching corpus: 12810, signal 272573/288916 (executing program) 1970/01/01 00:16:14 fetching corpus: 12858, signal 272867/288916 (executing program) 1970/01/01 00:16:16 fetching corpus: 12908, signal 273095/288916 (executing program) 1970/01/01 00:16:18 fetching corpus: 12956, signal 273540/288916 (executing program) 1970/01/01 00:16:21 fetching corpus: 13005, signal 273863/288916 (executing program) 1970/01/01 00:16:24 fetching corpus: 13053, signal 274060/288920 (executing program) 1970/01/01 00:16:26 fetching corpus: 13102, signal 274291/288923 (executing program) 1970/01/01 00:16:29 fetching corpus: 13149, signal 274695/288923 (executing program) 1970/01/01 00:16:32 fetching corpus: 13196, signal 274974/288923 (executing program) 1970/01/01 00:16:33 fetching corpus: 13244, signal 275293/288928 (executing program) 1970/01/01 00:16:36 fetching corpus: 13294, signal 275525/288932 (executing program) 1970/01/01 00:16:39 fetching corpus: 13343, signal 275750/288932 (executing program) 1970/01/01 00:16:42 fetching corpus: 13392, signal 276004/288932 (executing program) 1970/01/01 00:16:43 fetching corpus: 13442, signal 276316/288932 (executing program) 1970/01/01 00:16:47 fetching corpus: 13490, signal 276564/288932 (executing program) 1970/01/01 00:16:50 fetching corpus: 13540, signal 276800/288932 (executing program) 1970/01/01 00:16:52 fetching corpus: 13589, signal 277134/288947 (executing program) 1970/01/01 00:16:55 fetching corpus: 13639, signal 277470/288949 (executing program) 1970/01/01 00:16:57 fetching corpus: 13687, signal 277691/288951 (executing program) 1970/01/01 00:16:59 fetching corpus: 13736, signal 278006/288951 (executing program) 1970/01/01 00:17:01 fetching corpus: 13783, signal 278378/288951 (executing program) 1970/01/01 00:17:03 fetching corpus: 13832, signal 278886/288951 (executing program) 1970/01/01 00:17:05 fetching corpus: 13881, signal 279115/288951 (executing program) 1970/01/01 00:17:06 fetching corpus: 13930, signal 279347/288951 (executing program) 1970/01/01 00:17:09 fetching corpus: 13979, signal 279637/288951 (executing program) 1970/01/01 00:17:13 fetching corpus: 14029, signal 279847/288963 (executing program) 1970/01/01 00:17:15 fetching corpus: 14078, signal 280061/288965 (executing program) 1970/01/01 00:17:17 fetching corpus: 14127, signal 280294/288966 (executing program) 1970/01/01 00:17:18 fetching corpus: 14176, signal 280608/288966 (executing program) 1970/01/01 00:17:20 fetching corpus: 14225, signal 280878/288969 (executing program) 1970/01/01 00:17:22 fetching corpus: 14274, signal 281197/288969 (executing program) 1970/01/01 00:17:24 fetching corpus: 14322, signal 281401/288969 (executing program) 1970/01/01 00:17:27 fetching corpus: 14370, signal 281741/288969 (executing program) 1970/01/01 00:17:28 fetching corpus: 14420, signal 281939/288971 (executing program) 1970/01/01 00:17:30 fetching corpus: 14468, signal 282171/288971 (executing program) 1970/01/01 00:17:32 fetching corpus: 14517, signal 282608/288973 (executing program) 1970/01/01 00:17:35 fetching corpus: 14565, signal 283204/288973 (executing program) 1970/01/01 00:17:39 fetching corpus: 14614, signal 283478/288978 (executing program) 1970/01/01 00:17:41 fetching corpus: 14662, signal 283721/288984 (executing program) 1970/01/01 00:17:44 fetching corpus: 14710, signal 283985/288984 (executing program) 1970/01/01 00:17:46 fetching corpus: 14760, signal 284204/288986 (executing program) 1970/01/01 00:17:48 fetching corpus: 14809, signal 284383/288986 (executing program) 1970/01/01 00:17:50 fetching corpus: 14858, signal 284569/288991 (executing program) 1970/01/01 00:17:52 fetching corpus: 14906, signal 284861/288991 (executing program) 1970/01/01 00:17:55 fetching corpus: 14954, signal 285185/288996 (executing program) 1970/01/01 00:17:57 fetching corpus: 15004, signal 285374/288998 (executing program) 1970/01/01 00:17:59 fetching corpus: 15054, signal 285689/288999 (executing program) 1970/01/01 00:18:01 fetching corpus: 15104, signal 285936/288999 (executing program) 1970/01/01 00:18:04 fetching corpus: 15151, signal 286206/288999 (executing program) 1970/01/01 00:18:07 fetching corpus: 15200, signal 286516/289009 (executing program) 1970/01/01 00:18:08 fetching corpus: 15229, signal 286700/289009 (executing program) 1970/01/01 00:18:09 fetching corpus: 15229, signal 286700/289009 (executing program) 1970/01/01 00:20:18 starting 2 fuzzer processes 00:20:18 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) listen(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x4}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 00:20:18 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x23a2420, &(0x7f0000000040)) [ 1243.065071][ T2058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.162204][ T2058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.396046][ T2059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.504099][ T2059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.496531][ T2058] device hsr_slave_0 entered promiscuous mode [ 1254.583349][ T2058] device hsr_slave_1 entered promiscuous mode [ 1256.905847][ T2059] device hsr_slave_0 entered promiscuous mode [ 1256.974936][ T2059] device hsr_slave_1 entered promiscuous mode [ 1256.995482][ T2059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1257.002489][ T2059] Cannot create hsr debugfs directory [ 1263.512185][ T2058] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1263.855095][ T2058] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1264.222871][ T2058] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1264.484407][ T2058] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1265.350263][ T2059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1265.805854][ T2059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1266.090269][ T2059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1266.393501][ T2059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1285.642953][ T2058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.376082][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1287.506235][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1288.152336][ T2059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.555133][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1289.658276][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1299.984503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1300.182439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1300.513000][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1300.582357][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1301.124988][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1302.683024][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.791870][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1302.853252][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1303.273649][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1303.352807][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1303.629754][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1305.265746][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1305.419492][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1305.491371][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1305.594881][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1305.660568][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1305.664520][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1305.681344][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1306.246562][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1308.010199][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1308.082126][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1308.406579][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1308.452391][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1308.656342][ T2059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1310.368423][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1310.372969][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.825557][ T2119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1337.878805][ T2119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1340.164428][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1340.241942][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1348.125599][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1348.180638][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1348.350778][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1348.382887][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1348.406076][ T2058] device veth0_vlan entered promiscuous mode [ 1349.024407][ T2058] device veth1_vlan entered promiscuous mode [ 1349.679484][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1349.733109][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1349.856556][ T2119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1349.915069][ T2119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1350.106191][ T2059] device veth0_vlan entered promiscuous mode [ 1350.800550][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1350.832041][ T2459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1350.964012][ T2059] device veth1_vlan entered promiscuous mode [ 1351.054765][ T2058] device veth0_macvtap entered promiscuous mode [ 1351.261390][ T2119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1351.691938][ T2058] device veth1_macvtap entered promiscuous mode [ 1352.862568][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1352.932856][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1352.971370][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1352.999789][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1353.291040][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1353.330201][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1353.422197][ T2059] device veth0_macvtap entered promiscuous mode [ 1353.595831][ T2058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.629401][ T2058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.631357][ T2058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.633198][ T2058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.904985][ T2059] device veth1_macvtap entered promiscuous mode [ 1354.051763][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1356.480695][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1356.582122][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1357.173973][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1357.225416][ T2658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1357.520816][ T2059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.522729][ T2059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.524305][ T2059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.525835][ T2059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.784533][ T2752] EXT4-fs (vda): re-mounted. Quota mode: none. 00:22:44 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x23a2420, &(0x7f0000000040)) 00:22:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) close(r0) [ 1368.275714][ T2758] EXT4-fs (vda): re-mounted. Quota mode: none. 00:22:48 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x23a2420, &(0x7f0000000040)) 00:22:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) close(r0) [ 1372.560503][ T2763] EXT4-fs (vda): re-mounted. Quota mode: none. 00:22:53 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x23a2420, &(0x7f0000000040)) 00:22:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) close(r0) [ 1376.486185][ T2769] EXT4-fs (vda): re-mounted. Quota mode: none. 00:22:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) close(r0) 00:22:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r8}, 0x14) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x16}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffff445}, @L2TP_ATTR_DEBUG={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5c, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r11}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r11, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0xb312a308) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) [ 1380.775964][ T2774] device batadv_slave_1 entered promiscuous mode [ 1382.683827][ T2771] device batadv_slave_1 left promiscuous mode 00:23:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x4, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 00:23:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r8}, 0x14) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x16}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffff445}, @L2TP_ATTR_DEBUG={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5c, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r11}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r11, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0xb312a308) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) [ 1386.282515][ T2658] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1386.659554][ T2781] device batadv_slave_1 entered promiscuous mode [ 1386.724313][ T2658] usb 1-1: Using ep0 maxpacket: 16 [ 1386.912611][ T2658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.915490][ T2658] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1386.923780][ T2658] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1386.925631][ T2658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.124364][ T2658] usb 1-1: config 0 descriptor?? [ 1387.231458][ T2780] device batadv_slave_1 left promiscuous mode 00:23:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r8}, 0x14) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x16}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffff445}, @L2TP_ATTR_DEBUG={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5c, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r11}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r11, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0xb312a308) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) [ 1388.593312][ T2658] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input0 [ 1389.019470][ T2658] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 1389.023576][ T2658] CPU: 0 PID: 2658 Comm: kworker/0:3 Not tainted 5.17.0-rc1-syzkaller-00001-gc80ee64a8020 #0 [ 1389.025928][ T2658] Hardware name: riscv-virtio,qemu (DT) [ 1389.027510][ T2658] Workqueue: usb_hub_wq hub_event [ 1389.029187][ T2658] Call Trace: [ 1389.030172][ T2658] [] dump_backtrace+0x2e/0x3c [ 1389.031585][ T2658] [] show_stack+0x34/0x40 [ 1389.032849][ T2658] [] dump_stack_lvl+0xe4/0x150 [ 1389.034147][ T2658] [] dump_stack+0x1c/0x24 [ 1389.035393][ T2658] [] panic+0x24a/0x634 [ 1389.036459][ T2658] [] schedule+0x0/0x14c [ 1389.037988][ T2658] [] preempt_schedule_common+0x4e/0xde [ 1389.039452][ T2658] [] preempt_schedule+0x34/0x36 [ 1389.040824][ T2658] [] __kernfs_new_node+0x5e8/0x5f2 [ 1389.042239][ T2658] [] kernfs_new_node+0x66/0xbe [ 1389.043488][ T2658] [] __kernfs_create_file+0x4e/0x1e8 [ 1389.044759][ T2658] [] sysfs_add_file_mode_ns+0x138/0x254 [ 1389.045974][ T2658] [] sysfs_merge_group+0x13e/0x234 [ 1389.054090][ T2658] [] dpm_sysfs_add+0x1c6/0x1dc [ 1389.057064][ T2658] [] device_add+0x846/0x129e [ 1389.058788][ T2658] [] device_create_groups_vargs+0x160/0x17e [ 1389.060078][ T2658] [] device_create+0xae/0xe2 [ 1389.061280][ T2658] [] hidraw_connect+0x12e/0x26e [ 1389.062502][ T2658] [] hid_connect+0x50c/0x858 [ 1389.063651][ T2658] [] hid_hw_start+0x9c/0xda [ 1389.064979][ T2658] [] ms_probe+0x10c/0x356 [ 1389.066184][ T2658] [] hid_device_probe+0x1b8/0x24c [ 1389.068090][ T2658] [] really_probe+0x1a6/0x89e [ 1389.069743][ T2658] [] __driver_probe_device+0x24a/0x2d4 [ 1389.070996][ T2658] [] driver_probe_device+0x60/0x1a4 [ 1389.072749][ T2658] [] __device_attach_driver+0x17c/0x224 [ 1389.073966][ T2658] [] bus_for_each_drv+0x132/0x1a6 [ 1389.076166][ T2658] [] __device_attach+0x1e0/0x372 [ 1389.077890][ T2658] [] device_initial_probe+0x1c/0x26 [ 1389.079676][ T2658] [] bus_probe_device+0x144/0x154 [ 1389.080839][ T2658] [] device_add+0x91e/0x129e [ 1389.082057][ T2658] [] hid_add_device+0x268/0x5ca [ 1389.083478][ T2658] [] usbhid_probe+0x6b6/0x8c0 [ 1389.084903][ T2658] [] usb_probe_interface+0x21c/0x57a [ 1389.086139][ T2658] [] really_probe+0x1a6/0x89e [ 1389.087866][ T2658] [] __driver_probe_device+0x24a/0x2d4 [ 1389.089172][ T2658] [] driver_probe_device+0x60/0x1a4 [ 1389.090475][ T2658] [] __device_attach_driver+0x17c/0x224 [ 1389.092428][ T2658] [] bus_for_each_drv+0x132/0x1a6 [ 1389.093724][ T2658] [] __device_attach+0x1e0/0x372 [ 1389.095008][ T2658] [] device_initial_probe+0x1c/0x26 [ 1389.096749][ T2658] [] bus_probe_device+0x144/0x154 [ 1389.098505][ T2658] [] device_add+0x91e/0x129e [ 1389.099756][ T2658] [] usb_set_configuration+0xafe/0xf6a [ 1389.100960][ T2658] [] usb_generic_driver_probe+0xb2/0x122 [ 1389.102295][ T2658] [] usb_probe_device+0xa8/0x204 [ 1389.103501][ T2658] [] really_probe+0x1a6/0x89e [ 1389.104642][ T2658] [] __driver_probe_device+0x24a/0x2d4 [ 1389.105819][ T2658] [] driver_probe_device+0x60/0x1a4 [ 1389.107345][ T2658] [] __device_attach_driver+0x17c/0x224 [ 1389.109089][ T2658] [] bus_for_each_drv+0x132/0x1a6 [ 1389.110311][ T2658] [] __device_attach+0x1e0/0x372 [ 1389.111554][ T2658] [] device_initial_probe+0x1c/0x26 [ 1389.112991][ T2658] [] bus_probe_device+0x144/0x154 [ 1389.114167][ T2658] [] device_add+0x91e/0x129e [ 1389.115437][ T2658] [] usb_new_device+0x5c8/0xd78 [ 1389.116608][ T2658] [] hub_event+0x1b3e/0x3364 [ 1389.118256][ T2658] [] process_one_work+0x654/0xffe [ 1389.119573][ T2658] [] worker_thread+0x360/0x8fa [ 1389.120857][ T2658] [] kthread+0x19e/0x1fa [ 1389.122677][ T2658] [] ret_from_exception+0x0/0x10 [ 1389.124905][ T2658] SMP: stopping secondary CPUs [ 1389.127836][ T2658] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:06:28 Registers: info registers vcpu 0 pc ffffffff80dc1582 mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f936 sepc ffffffff80c24c4e mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc1582 x2/sp ffffaf80108f16f0 x3/gp ffffffff85863ac0 x4/tp ffffaf800de9e100 x5/t0 ffffffff86bcb657 x6/t1 fea115d63e70ba00 x7/t2 0000000000000000 x8/s0 ffffaf80108f1710 x9/s1 ffffffff86e58900 x10/a0 ffff8f800066c005 x11/a1 0000000000000007 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc1582 x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff80dcc282 x18/s2 0000000000000005 x19/s3 0000000000002710 x20/s4 0000000000000020 x21/s5 ffffffff86e58b98 x22/s6 ffffffff86e58950 x23/s7 ffffffff86bcb6b2 x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff8011223a x30/t5 1ffff5f00211e294 x31/t6 ffffffff86bcb657 f0/ft0 3fd3333333333333 f1/ft1 3ff3333333333333 f2/ft2 3fd35650ebcc7a6a f3/ft3 41bb22d060000000 f4/ft4 3ff0000000000000 f5/ft5 4000000000000000 f6/ft6 3fe0000000000000 f7/ft7 3f999999999999a0 f8/fs0 3feb81f0fcf1dd5a f9/fs1 3f9423ebe81f3fa0 f10/fa0 3f80930424462ae2 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff831a25e4 mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f936 sepc ffffffff8010b222 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80115962 x2/sp ffffaf80100b3a60 x3/gp ffffffff85863ac0 x4/tp ffffaf800ed60000 x5/t0 ffffaf800743b6e0 x6/t1 fea115d63e70ba00 x7/t2 00000000012da7c7 x8/s0 ffffaf80100b3b30 x9/s1 0000000000000001 x10/a0 ffffffff838a0620 x11/a1 00000000000f0000 x12/a2 1ffff5f001dac000 x13/a3 ffffffff831a2450 x14/a4 0000000000000003 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffff8176b8ac x18/s2 ffffaf8007558800 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000001 x22/s6 0000000000000000 x23/s7 ffffffff8176b8ac x24/s8 ffffffff86c1a620 x25/s9 0000000000000002 x26/s10 ffffffff850d46c0 x27/s11 ffffaf80100b3b20 x28/t3 ffffffff8011636a x29/t4 ffffffff8011223a x30/t5 1ffff5f00201672c x31/t6 0000000000000006 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 414fffffe0000000 f3/ft3 43e0000000000000 f4/ft4 3ffe000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000