syzkaller login: [ 259.538180][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 259.573998][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 277.294964][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:15665' (ECDSA) to the list of known hosts. 1970/01/01 00:05:16 fuzzer started 1970/01/01 00:05:30 dialing manager at localhost:42295 [ 338.355054][ T2031] cgroup: Unknown subsys name 'net' [ 339.764260][ T2031] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:39 syscalls: 2827 1970/01/01 00:05:39 code coverage: enabled 1970/01/01 00:05:39 comparison tracing: enabled 1970/01/01 00:05:39 extra coverage: enabled 1970/01/01 00:05:39 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:39 setuid sandbox: enabled 1970/01/01 00:05:39 namespace sandbox: enabled 1970/01/01 00:05:39 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:39 fault injection: enabled 1970/01/01 00:05:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:39 net packet injection: enabled 1970/01/01 00:05:39 net device setup: enabled 1970/01/01 00:05:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:40 USB emulation: enabled 1970/01/01 00:05:40 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:40 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:40 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:45 fetching corpus: 50, signal 29298/31136 (executing program) 1970/01/01 00:05:48 fetching corpus: 100, signal 45905/49375 (executing program) 1970/01/01 00:05:53 fetching corpus: 150, signal 55420/60443 (executing program) 1970/01/01 00:05:56 fetching corpus: 200, signal 62007/68559 (executing program) 1970/01/01 00:05:58 fetching corpus: 250, signal 70424/78374 (executing program) 1970/01/01 00:06:01 fetching corpus: 300, signal 77100/86391 (executing program) 1970/01/01 00:06:04 fetching corpus: 350, signal 80903/91612 (executing program) 1970/01/01 00:06:07 fetching corpus: 400, signal 85241/97304 (executing program) 1970/01/01 00:06:10 fetching corpus: 450, signal 89953/103310 (executing program) 1970/01/01 00:06:13 fetching corpus: 500, signal 92775/107472 (executing program) 1970/01/01 00:06:16 fetching corpus: 550, signal 95775/111748 (executing program) 1970/01/01 00:06:19 fetching corpus: 600, signal 99460/116631 (executing program) 1970/01/01 00:06:21 fetching corpus: 650, signal 102046/120423 (executing program) 1970/01/01 00:06:24 fetching corpus: 700, signal 104070/123671 (executing program) 1970/01/01 00:06:27 fetching corpus: 750, signal 106542/127348 (executing program) 1970/01/01 00:06:31 fetching corpus: 800, signal 109823/131679 (executing program) 1970/01/01 00:06:33 fetching corpus: 850, signal 112239/135221 (executing program) 1970/01/01 00:06:36 fetching corpus: 900, signal 114195/138337 (executing program) 1970/01/01 00:06:38 fetching corpus: 950, signal 116631/141823 (executing program) 1970/01/01 00:06:40 fetching corpus: 1000, signal 118338/144678 (executing program) 1970/01/01 00:06:42 fetching corpus: 1050, signal 120356/147733 (executing program) 1970/01/01 00:06:44 fetching corpus: 1100, signal 122151/150643 (executing program) 1970/01/01 00:06:48 fetching corpus: 1150, signal 124123/153658 (executing program) 1970/01/01 00:06:50 fetching corpus: 1200, signal 126006/156533 (executing program) 1970/01/01 00:06:53 fetching corpus: 1250, signal 128271/159686 (executing program) 1970/01/01 00:06:56 fetching corpus: 1300, signal 130573/162899 (executing program) 1970/01/01 00:06:59 fetching corpus: 1350, signal 132509/165759 (executing program) 1970/01/01 00:07:01 fetching corpus: 1400, signal 133660/167888 (executing program) 1970/01/01 00:07:03 fetching corpus: 1450, signal 135578/170690 (executing program) 1970/01/01 00:07:05 fetching corpus: 1500, signal 137248/173313 (executing program) 1970/01/01 00:07:06 fetching corpus: 1550, signal 138433/175510 (executing program) 1970/01/01 00:07:09 fetching corpus: 1600, signal 139919/177901 (executing program) 1970/01/01 00:07:11 fetching corpus: 1650, signal 141089/180041 (executing program) 1970/01/01 00:07:13 fetching corpus: 1700, signal 142785/182547 (executing program) 1970/01/01 00:07:15 fetching corpus: 1750, signal 144050/184704 (executing program) 1970/01/01 00:07:16 fetching corpus: 1800, signal 145709/187177 (executing program) 1970/01/01 00:07:20 fetching corpus: 1850, signal 146868/189238 (executing program) 1970/01/01 00:07:23 fetching corpus: 1900, signal 148739/191844 (executing program) 1970/01/01 00:07:25 fetching corpus: 1950, signal 150391/194235 (executing program) 1970/01/01 00:07:27 fetching corpus: 2000, signal 151859/196536 (executing program) 1970/01/01 00:07:30 fetching corpus: 2050, signal 152675/198291 (executing program) 1970/01/01 00:07:33 fetching corpus: 2100, signal 153675/200132 (executing program) 1970/01/01 00:07:35 fetching corpus: 2150, signal 154701/201949 (executing program) 1970/01/01 00:07:38 fetching corpus: 2200, signal 156667/204530 (executing program) 1970/01/01 00:07:39 fetching corpus: 2250, signal 157808/206428 (executing program) 1970/01/01 00:07:42 fetching corpus: 2300, signal 158578/208088 (executing program) 1970/01/01 00:07:45 fetching corpus: 2350, signal 159606/209897 (executing program) 1970/01/01 00:07:48 fetching corpus: 2400, signal 160789/211807 (executing program) 1970/01/01 00:07:55 fetching corpus: 2450, signal 161927/213706 (executing program) 1970/01/01 00:07:57 fetching corpus: 2500, signal 162772/215339 (executing program) 1970/01/01 00:07:59 fetching corpus: 2550, signal 164193/217406 (executing program) 1970/01/01 00:08:03 fetching corpus: 2600, signal 165440/219322 (executing program) 1970/01/01 00:08:06 fetching corpus: 2650, signal 166325/220965 (executing program) 1970/01/01 00:08:08 fetching corpus: 2700, signal 167842/223043 (executing program) 1970/01/01 00:08:10 fetching corpus: 2750, signal 168966/224813 (executing program) 1970/01/01 00:08:12 fetching corpus: 2800, signal 169951/226465 (executing program) 1970/01/01 00:08:15 fetching corpus: 2850, signal 170696/227961 (executing program) 1970/01/01 00:08:17 fetching corpus: 2900, signal 171990/229824 (executing program) 1970/01/01 00:08:19 fetching corpus: 2950, signal 173012/231513 (executing program) 1970/01/01 00:08:22 fetching corpus: 3000, signal 174151/233224 (executing program) 1970/01/01 00:08:24 fetching corpus: 3050, signal 174964/234730 (executing program) 1970/01/01 00:08:26 fetching corpus: 3100, signal 175747/236246 (executing program) 1970/01/01 00:08:28 fetching corpus: 3150, signal 176653/237800 (executing program) 1970/01/01 00:08:31 fetching corpus: 3200, signal 179969/240791 (executing program) 1970/01/01 00:08:33 fetching corpus: 3250, signal 180861/242280 (executing program) 1970/01/01 00:08:35 fetching corpus: 3300, signal 181503/243642 (executing program) 1970/01/01 00:08:36 fetching corpus: 3350, signal 182274/245047 (executing program) 1970/01/01 00:08:38 fetching corpus: 3400, signal 183192/246536 (executing program) 1970/01/01 00:08:41 fetching corpus: 3450, signal 185619/248939 (executing program) 1970/01/01 00:08:43 fetching corpus: 3500, signal 186652/250431 (executing program) 1970/01/01 00:08:45 fetching corpus: 3550, signal 187204/251671 (executing program) 1970/01/01 00:08:47 fetching corpus: 3600, signal 188215/253204 (executing program) 1970/01/01 00:08:50 fetching corpus: 3650, signal 188999/254571 (executing program) 1970/01/01 00:08:52 fetching corpus: 3700, signal 189613/255813 (executing program) 1970/01/01 00:08:54 fetching corpus: 3750, signal 190439/257169 (executing program) 1970/01/01 00:08:55 fetching corpus: 3800, signal 192559/259222 (executing program) 1970/01/01 00:08:58 fetching corpus: 3850, signal 193387/260558 (executing program) 1970/01/01 00:09:01 fetching corpus: 3900, signal 193976/261738 (executing program) 1970/01/01 00:09:02 fetching corpus: 3950, signal 194981/263154 (executing program) 1970/01/01 00:09:05 fetching corpus: 4000, signal 195766/264445 (executing program) 1970/01/01 00:09:07 fetching corpus: 4050, signal 196556/265689 (executing program) 1970/01/01 00:09:09 fetching corpus: 4100, signal 197257/266918 (executing program) 1970/01/01 00:09:11 fetching corpus: 4150, signal 197898/268088 (executing program) 1970/01/01 00:09:14 fetching corpus: 4200, signal 198490/269177 (executing program) 1970/01/01 00:09:16 fetching corpus: 4250, signal 199116/270378 (executing program) 1970/01/01 00:09:20 fetching corpus: 4300, signal 200037/271659 (executing program) 1970/01/01 00:09:23 fetching corpus: 4350, signal 200676/272820 (executing program) 1970/01/01 00:09:26 fetching corpus: 4400, signal 202424/274515 (executing program) 1970/01/01 00:09:29 fetching corpus: 4450, signal 203066/275672 (executing program) 1970/01/01 00:09:31 fetching corpus: 4500, signal 203740/276815 (executing program) 1970/01/01 00:09:33 fetching corpus: 4550, signal 204565/278021 (executing program) 1970/01/01 00:09:37 fetching corpus: 4600, signal 205682/279362 (executing program) 1970/01/01 00:09:39 fetching corpus: 4650, signal 206346/280446 (executing program) 1970/01/01 00:09:42 fetching corpus: 4700, signal 207144/281619 (executing program) 1970/01/01 00:09:45 fetching corpus: 4750, signal 208464/283005 (executing program) 1970/01/01 00:09:48 fetching corpus: 4800, signal 208937/283995 (executing program) 1970/01/01 00:09:50 fetching corpus: 4850, signal 209725/285125 (executing program) 1970/01/01 00:09:53 fetching corpus: 4900, signal 210441/286201 (executing program) 1970/01/01 00:09:55 fetching corpus: 4950, signal 210973/287186 (executing program) 1970/01/01 00:09:59 fetching corpus: 5000, signal 211826/288315 (executing program) 1970/01/01 00:10:04 fetching corpus: 5050, signal 212356/289297 (executing program) 1970/01/01 00:10:07 fetching corpus: 5100, signal 212949/290343 (executing program) 1970/01/01 00:10:11 fetching corpus: 5150, signal 213562/291333 (executing program) 1970/01/01 00:10:15 fetching corpus: 5200, signal 214488/292476 (executing program) 1970/01/01 00:10:16 fetching corpus: 5250, signal 215027/293405 (executing program) 1970/01/01 00:10:19 fetching corpus: 5300, signal 215483/294315 (executing program) 1970/01/01 00:10:21 fetching corpus: 5350, signal 216131/295250 (executing program) 1970/01/01 00:10:23 fetching corpus: 5400, signal 216661/296183 (executing program) 1970/01/01 00:10:26 fetching corpus: 5450, signal 217266/297112 (executing program) 1970/01/01 00:10:29 fetching corpus: 5500, signal 217837/298089 (executing program) 1970/01/01 00:10:31 fetching corpus: 5550, signal 218416/299019 (executing program) 1970/01/01 00:10:34 fetching corpus: 5600, signal 219048/299989 (executing program) 1970/01/01 00:10:37 fetching corpus: 5650, signal 219635/300931 (executing program) 1970/01/01 00:10:40 fetching corpus: 5700, signal 220420/301930 (executing program) 1970/01/01 00:10:43 fetching corpus: 5750, signal 220885/302775 (executing program) 1970/01/01 00:10:46 fetching corpus: 5800, signal 221642/303749 (executing program) 1970/01/01 00:10:49 fetching corpus: 5850, signal 222139/304636 (executing program) 1970/01/01 00:10:50 fetching corpus: 5900, signal 222555/305454 (executing program) 1970/01/01 00:10:52 fetching corpus: 5950, signal 223298/306363 (executing program) 1970/01/01 00:10:54 fetching corpus: 6000, signal 223817/307195 (executing program) 1970/01/01 00:10:57 fetching corpus: 6050, signal 224383/308026 (executing program) 1970/01/01 00:11:01 fetching corpus: 6100, signal 225179/308933 (executing program) 1970/01/01 00:11:03 fetching corpus: 6150, signal 225675/309713 (executing program) 1970/01/01 00:11:06 fetching corpus: 6200, signal 226193/310540 (executing program) 1970/01/01 00:11:08 fetching corpus: 6250, signal 226790/311363 (executing program) 1970/01/01 00:11:10 fetching corpus: 6300, signal 227387/312192 (executing program) 1970/01/01 00:11:12 fetching corpus: 6350, signal 227890/312995 (executing program) 1970/01/01 00:11:15 fetching corpus: 6400, signal 228344/313784 (executing program) 1970/01/01 00:11:18 fetching corpus: 6450, signal 228821/314544 (executing program) 1970/01/01 00:11:20 fetching corpus: 6500, signal 229667/315424 (executing program) 1970/01/01 00:11:22 fetching corpus: 6550, signal 230276/316210 (executing program) 1970/01/01 00:11:24 fetching corpus: 6600, signal 230791/317000 (executing program) 1970/01/01 00:11:25 fetching corpus: 6650, signal 231742/317869 (executing program) 1970/01/01 00:11:28 fetching corpus: 6700, signal 232268/318627 (executing program) 1970/01/01 00:11:32 fetching corpus: 6750, signal 233060/319417 (executing program) 1970/01/01 00:11:34 fetching corpus: 6800, signal 233616/320141 (executing program) 1970/01/01 00:11:37 fetching corpus: 6850, signal 234184/320892 (executing program) 1970/01/01 00:11:39 fetching corpus: 6900, signal 235049/321682 (executing program) 1970/01/01 00:11:41 fetching corpus: 6950, signal 235518/322381 (executing program) 1970/01/01 00:11:44 fetching corpus: 7000, signal 235947/323076 (executing program) 1970/01/01 00:11:47 fetching corpus: 7050, signal 236766/323852 (executing program) 1970/01/01 00:11:51 fetching corpus: 7100, signal 237351/324518 (executing program) 1970/01/01 00:11:54 fetching corpus: 7150, signal 237866/325218 (executing program) 1970/01/01 00:11:56 fetching corpus: 7200, signal 238416/325900 (executing program) 1970/01/01 00:11:58 fetching corpus: 7250, signal 238906/326637 (executing program) 1970/01/01 00:12:00 fetching corpus: 7300, signal 239389/327329 (executing program) 1970/01/01 00:12:03 fetching corpus: 7350, signal 239815/327989 (executing program) 1970/01/01 00:12:05 fetching corpus: 7400, signal 240321/328654 (executing program) 1970/01/01 00:12:08 fetching corpus: 7450, signal 240981/329327 (executing program) 1970/01/01 00:12:10 fetching corpus: 7500, signal 241631/329970 (executing program) 1970/01/01 00:12:13 fetching corpus: 7550, signal 242072/330608 (executing program) 1970/01/01 00:12:16 fetching corpus: 7600, signal 242485/331253 (executing program) 1970/01/01 00:12:18 fetching corpus: 7650, signal 242932/331855 (executing program) 1970/01/01 00:12:22 fetching corpus: 7700, signal 243449/332499 (executing program) 1970/01/01 00:12:24 fetching corpus: 7750, signal 243927/333129 (executing program) 1970/01/01 00:12:27 fetching corpus: 7800, signal 244369/333781 (executing program) 1970/01/01 00:12:29 fetching corpus: 7850, signal 244662/334409 (executing program) 1970/01/01 00:12:32 fetching corpus: 7900, signal 245135/335053 (executing program) 1970/01/01 00:12:34 fetching corpus: 7950, signal 245693/335657 (executing program) 1970/01/01 00:12:38 fetching corpus: 8000, signal 246050/336237 (executing program) 1970/01/01 00:12:41 fetching corpus: 8050, signal 246562/336845 (executing program) 1970/01/01 00:12:44 fetching corpus: 8100, signal 247037/337452 (executing program) 1970/01/01 00:12:46 fetching corpus: 8150, signal 247520/338064 (executing program) 1970/01/01 00:12:49 fetching corpus: 8200, signal 248094/338626 (executing program) 1970/01/01 00:12:51 fetching corpus: 8250, signal 248481/339177 (executing program) 1970/01/01 00:12:54 fetching corpus: 8300, signal 248999/339732 (executing program) 1970/01/01 00:12:57 fetching corpus: 8350, signal 249360/340310 (executing program) 1970/01/01 00:13:00 fetching corpus: 8400, signal 249817/340845 (executing program) 1970/01/01 00:13:03 fetching corpus: 8450, signal 250220/341368 (executing program) 1970/01/01 00:13:05 fetching corpus: 8500, signal 250639/341903 (executing program) 1970/01/01 00:13:07 fetching corpus: 8550, signal 251001/342438 (executing program) 1970/01/01 00:13:10 fetching corpus: 8600, signal 251422/342589 (executing program) 1970/01/01 00:13:13 fetching corpus: 8650, signal 251738/342589 (executing program) 1970/01/01 00:13:17 fetching corpus: 8700, signal 252071/342589 (executing program) 1970/01/01 00:13:19 fetching corpus: 8750, signal 252408/342589 (executing program) 1970/01/01 00:13:22 fetching corpus: 8800, signal 252932/342589 (executing program) 1970/01/01 00:13:24 fetching corpus: 8850, signal 253421/342589 (executing program) 1970/01/01 00:13:26 fetching corpus: 8900, signal 253875/342589 (executing program) 1970/01/01 00:13:28 fetching corpus: 8950, signal 254293/342593 (executing program) 1970/01/01 00:13:31 fetching corpus: 9000, signal 254645/342593 (executing program) 1970/01/01 00:13:34 fetching corpus: 9050, signal 255064/342593 (executing program) 1970/01/01 00:13:36 fetching corpus: 9100, signal 255500/342593 (executing program) 1970/01/01 00:13:39 fetching corpus: 9150, signal 256178/342593 (executing program) 1970/01/01 00:13:41 fetching corpus: 9200, signal 256684/342593 (executing program) 1970/01/01 00:13:43 fetching corpus: 9250, signal 257026/342593 (executing program) 1970/01/01 00:13:44 fetching corpus: 9300, signal 257396/342593 (executing program) 1970/01/01 00:13:46 fetching corpus: 9350, signal 257834/342593 (executing program) 1970/01/01 00:13:49 fetching corpus: 9400, signal 258148/342603 (executing program) 1970/01/01 00:13:52 fetching corpus: 9450, signal 258794/342609 (executing program) 1970/01/01 00:13:55 fetching corpus: 9500, signal 259251/342609 (executing program) 1970/01/01 00:13:57 fetching corpus: 9550, signal 259763/342609 (executing program) 1970/01/01 00:14:00 fetching corpus: 9600, signal 260247/342614 (executing program) 1970/01/01 00:14:01 fetching corpus: 9650, signal 260564/342614 (executing program) 1970/01/01 00:14:03 fetching corpus: 9700, signal 260968/342616 (executing program) 1970/01/01 00:14:06 fetching corpus: 9750, signal 261420/342616 (executing program) 1970/01/01 00:14:08 fetching corpus: 9800, signal 261780/342616 (executing program) 1970/01/01 00:14:11 fetching corpus: 9850, signal 262153/342616 (executing program) 1970/01/01 00:14:13 fetching corpus: 9900, signal 262497/342616 (executing program) 1970/01/01 00:14:15 fetching corpus: 9950, signal 262822/342618 (executing program) 1970/01/01 00:14:17 fetching corpus: 10000, signal 263202/342618 (executing program) 1970/01/01 00:14:19 fetching corpus: 10050, signal 263544/342618 (executing program) 1970/01/01 00:14:21 fetching corpus: 10100, signal 263869/342618 (executing program) 1970/01/01 00:14:23 fetching corpus: 10150, signal 264244/342618 (executing program) 1970/01/01 00:14:26 fetching corpus: 10200, signal 264662/342618 (executing program) 1970/01/01 00:14:32 fetching corpus: 10250, signal 265268/342618 (executing program) 1970/01/01 00:14:36 fetching corpus: 10300, signal 265561/342618 (executing program) 1970/01/01 00:14:39 fetching corpus: 10350, signal 265990/342618 (executing program) 1970/01/01 00:14:41 fetching corpus: 10400, signal 266353/342618 (executing program) 1970/01/01 00:14:43 fetching corpus: 10450, signal 266698/342618 (executing program) 1970/01/01 00:14:46 fetching corpus: 10500, signal 267152/342618 (executing program) 1970/01/01 00:14:47 fetching corpus: 10550, signal 267475/342618 (executing program) 1970/01/01 00:14:50 fetching corpus: 10600, signal 267970/342619 (executing program) 1970/01/01 00:14:52 fetching corpus: 10650, signal 268292/342628 (executing program) 1970/01/01 00:14:55 fetching corpus: 10700, signal 268767/342628 (executing program) 1970/01/01 00:14:59 fetching corpus: 10750, signal 269650/342628 (executing program) 1970/01/01 00:15:01 fetching corpus: 10800, signal 269919/342628 (executing program) 1970/01/01 00:15:03 fetching corpus: 10850, signal 270211/342628 (executing program) 1970/01/01 00:15:05 fetching corpus: 10900, signal 270576/342628 (executing program) 1970/01/01 00:15:07 fetching corpus: 10950, signal 270825/342628 (executing program) 1970/01/01 00:15:09 fetching corpus: 11000, signal 271110/342628 (executing program) 1970/01/01 00:15:11 fetching corpus: 11050, signal 271440/342628 (executing program) 1970/01/01 00:15:15 fetching corpus: 11100, signal 271757/342628 (executing program) 1970/01/01 00:15:17 fetching corpus: 11150, signal 272134/342628 (executing program) 1970/01/01 00:15:19 fetching corpus: 11200, signal 272458/342628 (executing program) 1970/01/01 00:15:21 fetching corpus: 11250, signal 272732/342635 (executing program) 1970/01/01 00:15:24 fetching corpus: 11300, signal 273072/342635 (executing program) 1970/01/01 00:15:26 fetching corpus: 11350, signal 273409/342635 (executing program) 1970/01/01 00:15:28 fetching corpus: 11400, signal 273704/342635 (executing program) 1970/01/01 00:15:31 fetching corpus: 11450, signal 274048/342635 (executing program) 1970/01/01 00:15:33 fetching corpus: 11500, signal 274319/342635 (executing program) 1970/01/01 00:15:37 fetching corpus: 11550, signal 274795/342635 (executing program) 1970/01/01 00:15:40 fetching corpus: 11600, signal 275070/342635 (executing program) 1970/01/01 00:15:42 fetching corpus: 11650, signal 275444/342635 (executing program) 1970/01/01 00:15:44 fetching corpus: 11700, signal 275742/342643 (executing program) 1970/01/01 00:15:46 fetching corpus: 11750, signal 276096/342643 (executing program) 1970/01/01 00:15:48 fetching corpus: 11800, signal 276512/342643 (executing program) 1970/01/01 00:15:50 fetching corpus: 11850, signal 276866/342643 (executing program) 1970/01/01 00:15:52 fetching corpus: 11900, signal 277156/342643 (executing program) 1970/01/01 00:15:55 fetching corpus: 11950, signal 277430/342643 (executing program) 1970/01/01 00:16:00 fetching corpus: 12000, signal 277912/342643 (executing program) 1970/01/01 00:16:04 fetching corpus: 12050, signal 278218/342643 (executing program) 1970/01/01 00:16:08 fetching corpus: 12100, signal 278573/342643 (executing program) 1970/01/01 00:16:10 fetching corpus: 12150, signal 278947/342643 (executing program) 1970/01/01 00:16:12 fetching corpus: 12200, signal 279228/342643 (executing program) 1970/01/01 00:16:14 fetching corpus: 12250, signal 279496/342643 (executing program) 1970/01/01 00:16:16 fetching corpus: 12300, signal 279740/342643 (executing program) 1970/01/01 00:16:18 fetching corpus: 12350, signal 280035/342643 (executing program) 1970/01/01 00:16:21 fetching corpus: 12400, signal 280426/342643 (executing program) 1970/01/01 00:16:23 fetching corpus: 12450, signal 280669/342643 (executing program) 1970/01/01 00:16:27 fetching corpus: 12500, signal 280963/342643 (executing program) 1970/01/01 00:16:30 fetching corpus: 12550, signal 281438/342647 (executing program) 1970/01/01 00:16:32 fetching corpus: 12600, signal 281718/342647 (executing program) 1970/01/01 00:16:34 fetching corpus: 12650, signal 282020/342647 (executing program) 1970/01/01 00:16:36 fetching corpus: 12700, signal 282341/342647 (executing program) 1970/01/01 00:16:38 fetching corpus: 12750, signal 282615/342647 (executing program) 1970/01/01 00:16:41 fetching corpus: 12800, signal 282970/342647 (executing program) 1970/01/01 00:16:43 fetching corpus: 12850, signal 283277/342647 (executing program) 1970/01/01 00:16:45 fetching corpus: 12900, signal 283540/342647 (executing program) 1970/01/01 00:16:47 fetching corpus: 12950, signal 283804/342647 (executing program) 1970/01/01 00:16:49 fetching corpus: 13000, signal 284020/342647 (executing program) 1970/01/01 00:16:53 fetching corpus: 13050, signal 284332/342648 (executing program) 1970/01/01 00:16:56 fetching corpus: 13100, signal 284597/342648 (executing program) 1970/01/01 00:16:59 fetching corpus: 13150, signal 284941/342648 (executing program) 1970/01/01 00:17:01 fetching corpus: 13200, signal 285215/342649 (executing program) 1970/01/01 00:17:03 fetching corpus: 13250, signal 285479/342649 (executing program) 1970/01/01 00:17:04 fetching corpus: 13300, signal 285729/342649 (executing program) 1970/01/01 00:17:07 fetching corpus: 13350, signal 286071/342649 (executing program) 1970/01/01 00:17:10 fetching corpus: 13400, signal 286364/342649 (executing program) 1970/01/01 00:17:12 fetching corpus: 13450, signal 286712/342649 (executing program) 1970/01/01 00:17:14 fetching corpus: 13500, signal 286979/342649 (executing program) 1970/01/01 00:17:18 fetching corpus: 13550, signal 287253/342649 (executing program) 1970/01/01 00:17:20 fetching corpus: 13600, signal 287501/342649 (executing program) 1970/01/01 00:17:24 fetching corpus: 13650, signal 287829/342650 (executing program) 1970/01/01 00:17:26 fetching corpus: 13700, signal 288119/342650 (executing program) 1970/01/01 00:17:29 fetching corpus: 13750, signal 288461/342650 (executing program) 1970/01/01 00:17:31 fetching corpus: 13800, signal 288767/342650 (executing program) 1970/01/01 00:17:32 fetching corpus: 13850, signal 289050/342650 (executing program) 1970/01/01 00:17:35 fetching corpus: 13900, signal 289302/342650 (executing program) 1970/01/01 00:17:37 fetching corpus: 13950, signal 289675/342650 (executing program) 1970/01/01 00:17:39 fetching corpus: 14000, signal 289981/342650 (executing program) 1970/01/01 00:17:43 fetching corpus: 14050, signal 290295/342650 (executing program) 1970/01/01 00:17:46 fetching corpus: 14100, signal 290489/342650 (executing program) 1970/01/01 00:17:49 fetching corpus: 14150, signal 290752/342650 (executing program) 1970/01/01 00:17:51 fetching corpus: 14200, signal 291022/342650 (executing program) 1970/01/01 00:17:53 fetching corpus: 14250, signal 291400/342650 (executing program) 1970/01/01 00:17:56 fetching corpus: 14300, signal 291754/342650 (executing program) 1970/01/01 00:17:58 fetching corpus: 14350, signal 292099/342650 (executing program) 1970/01/01 00:18:01 fetching corpus: 14400, signal 292497/342650 (executing program) 1970/01/01 00:18:03 fetching corpus: 14450, signal 292780/342650 (executing program) 1970/01/01 00:18:05 fetching corpus: 14500, signal 293152/342650 (executing program) 1970/01/01 00:18:08 fetching corpus: 14550, signal 293416/342651 (executing program) 1970/01/01 00:18:11 fetching corpus: 14600, signal 293698/342654 (executing program) 1970/01/01 00:18:14 fetching corpus: 14650, signal 293973/342654 (executing program) 1970/01/01 00:18:16 fetching corpus: 14700, signal 294276/342654 (executing program) 1970/01/01 00:18:19 fetching corpus: 14750, signal 294572/342657 (executing program) 1970/01/01 00:18:21 fetching corpus: 14800, signal 294842/342657 (executing program) 1970/01/01 00:18:23 fetching corpus: 14850, signal 295079/342657 (executing program) 1970/01/01 00:18:25 fetching corpus: 14900, signal 295319/342657 (executing program) 1970/01/01 00:18:28 fetching corpus: 14950, signal 295536/342657 (executing program) 1970/01/01 00:18:30 fetching corpus: 15000, signal 295790/342657 (executing program) 1970/01/01 00:18:32 fetching corpus: 15050, signal 296104/342657 (executing program) 1970/01/01 00:18:37 fetching corpus: 15100, signal 296348/342657 (executing program) 1970/01/01 00:18:40 fetching corpus: 15150, signal 296561/342657 (executing program) 1970/01/01 00:18:43 fetching corpus: 15200, signal 296902/342657 (executing program) 1970/01/01 00:18:46 fetching corpus: 15250, signal 297176/342657 (executing program) 1970/01/01 00:18:48 fetching corpus: 15300, signal 297441/342657 (executing program) 1970/01/01 00:18:50 fetching corpus: 15350, signal 297866/342657 (executing program) 1970/01/01 00:18:53 fetching corpus: 15400, signal 298208/342657 (executing program) 1970/01/01 00:18:56 fetching corpus: 15450, signal 298467/342667 (executing program) 1970/01/01 00:18:59 fetching corpus: 15500, signal 298697/342667 (executing program) 1970/01/01 00:19:00 fetching corpus: 15550, signal 298930/342667 (executing program) 1970/01/01 00:19:02 fetching corpus: 15600, signal 299118/342667 (executing program) 1970/01/01 00:19:05 fetching corpus: 15650, signal 299352/342667 (executing program) 1970/01/01 00:19:09 fetching corpus: 15700, signal 299558/342667 (executing program) 1970/01/01 00:19:13 fetching corpus: 15750, signal 299785/342667 (executing program) 1970/01/01 00:19:16 fetching corpus: 15800, signal 300057/342667 (executing program) 1970/01/01 00:19:19 fetching corpus: 15850, signal 300571/342667 (executing program) 1970/01/01 00:19:20 fetching corpus: 15870, signal 300671/342667 (executing program) 1970/01/01 00:19:20 fetching corpus: 15870, signal 300671/342667 (executing program) 1970/01/01 00:21:18 starting 2 fuzzer processes 00:21:18 executing program 0: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x3) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000040)=0x3) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x3) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6, 0xc9}}, './file0\x00'}) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') r3 = openat2(r2, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x509000, 0x2}, 0x18) symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x80) close(r0) sync_file_range(r3, 0x4, 0x4a427485, 0x3) syz_open_dev$dmmidi(&(0x7f0000000380), 0x174e32af, 0x109180) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000003c0)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000700)=r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000740)=@random={'security.', '/dev/dmmidi#\x00'}) 00:21:19 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x4, 0x678, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x62, 0x8035, 'veth0_to_hsr\x00', 'syzkaller1\x00', 'virt_wifi0\x00', 'vcan0\x00', @local, [0x0, 0xff, 0xff, 0x17e, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0xd6, 0x14e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1, 0x2}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0xe0, 0x9, 0x1, 0x0, "9fc1012e1cd1bb512f0ed103b08ee58c9b4cd1cc5fc6537c71bb2601b190493b132e8f25e8e147402317cf33c7a95073349c04f3288e6e8aa7310e7bb9a9e5d1"}}}}, {0x11, 0x10, 0x892f, 'batadv0\x00', 'vlan0\x00', 'geneve1\x00', 'vcan0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x11e, 0x17e, 0x1ae, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'tunl0\x00', {0xff}, 'team0\x00', {}, 0x10, 0x16}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xd, 0x8, 0x955b, 0x8, 0x10000}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x17, 0x14, 0x800, 'nr0\x00', 'syzkaller0\x00', 'veth1_vlan\x00', 'veth0_to_batadv\x00', @broadcast, [0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xf6, 0x12e, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}, @common=@log={'log\x00', 0x28, {{0x7, "8b0895944e62b7a05bd44b634ac83fd122d6f858af287369dd51f94ecc01", 0x1}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}}, {0x11, 0x58, 0xfbfb, 'vlan0\x00', 'veth1_to_batadv\x00', 'veth1\x00', 'ip6tnl0\x00', @empty, [0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x9e, 0x13e, 0x18e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x4, 0x8, 0x2, 0x6}}}], [@common=@log={'log\x00', 0x28, {{0x4, "4013156943fb85e5956ceeeb6f7861a25c5a98118c2607b54c71c5f399c7"}}}, @common=@log={'log\x00', 0x28, {{0x8, "dcc8103aa16182404ce6c1c810c311981a322593d4d9f6f2b1769a66acaf", 0x8}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x3ff, {0x8000000000000000}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x6f0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000740), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x1e0, 0x1e0, 0x3c8, 0xf0, 0x1e0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f0000000780), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xffffff80], 'batadv0\x00', 'netdevsim0\x00', {0xff}, {}, 0x89, 0x20, 0x6, 0x11}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x14, 0x30, 0x1}}}, {{@ipv6={@loopback, @private1, [0xff, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0x0, 0xffffff00], 'team_slave_1\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0xdc, 0x2, 0xa7}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'syzkaller1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv4=@broadcast, 0xf, 0x1b, 0x9}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'netpci0\x00', 'lo\x00', {0xff}, {}, 0x6c, 0x7, 0x1, 0x12}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@private=0xa010102, 0x25, 0x21, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e00)={0x0, 'syzkaller1\x00', {0x2}, 0xc91e}) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000e40)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000e80)=0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'vxcan0\x00'}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000f00)={0x0, 0x3ff}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000f80)={r0, 0x4, 0x10}, &(0x7f0000000fc0)=0xc) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000001000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001040)=0x28) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000001080)={'filter\x00', 0xb5, "5e9e0d7eb8e5f9d4cd0b38110e6848a041723c0feab5392cfa698c6650a913285632f840ad3062d9e4dfd1ddae9aaa914bb5671612fdb22b6b790a0fd237f311621962bc47da6c9eaa99cb4ce8dcf63815969763523f63406f1c02f8dee7eec7892d35344cbf18af8b75f3053f077c4222be86ea9baf2924a91aa7177bd08bd66a279190eb8b592d4c7bbeed1e3703dc81a3b07caed99502fdeabeb078e3b5dcae1f91912e506880910a488c1d4b321b071181224f"}, &(0x7f0000001180)=0xd9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0), 0x111ac0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000001200)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x4f3, @mcast2, 0xffff}, @in6={0xa, 0x4e24, 0x65, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x4}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1f}], 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000001280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000012c0)={r3}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000001300)={'bond_slave_1\x00', 0x1}) r4 = syz_open_dev$vcsu(&(0x7f0000001340), 0x8, 0x80200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000001380)={0x1d}, 0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x105080, 0x0) bind$llc(r5, &(0x7f0000001400)={0x1a, 0x110, 0x2, 0x8c, 0x0, 0x1, @local}, 0x10) [ 1303.528463][ T2057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.044224][ T2057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.033574][ T2059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.584569][ T2059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.441780][ T2057] device hsr_slave_0 entered promiscuous mode [ 1315.484975][ T2057] device hsr_slave_1 entered promiscuous mode [ 1318.117504][ T2059] device hsr_slave_0 entered promiscuous mode [ 1318.145856][ T2059] device hsr_slave_1 entered promiscuous mode [ 1318.165775][ T2059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1318.180594][ T2059] Cannot create hsr debugfs directory [ 1329.264257][ T2057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1329.435659][ T2057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1329.535133][ T2057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1329.965162][ T2057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1331.962750][ T2059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1332.204133][ T2059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1332.577571][ T2059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1332.893797][ T2059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1346.035369][ T2057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.865460][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1347.070809][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1349.862043][ T2059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.750393][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1350.809062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1358.623343][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1358.698561][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1360.215358][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1360.302549][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1360.335504][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1360.395261][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1361.042088][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1361.104708][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.483231][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.534644][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1361.782290][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1361.833219][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1362.011669][ T2057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1362.624389][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1362.717936][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1362.993532][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1363.523843][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1364.714179][ T2199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1364.733329][ T2199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1364.790799][ T2199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1364.879595][ T2199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1365.213304][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1365.273637][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1365.620044][ T2059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1366.743540][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1366.780054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1391.099006][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1391.165711][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1392.452810][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1392.510120][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1399.143882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1399.190378][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1399.300711][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1399.333188][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1399.527193][ T2057] device veth0_vlan entered promiscuous mode [ 1399.984976][ T2057] device veth1_vlan entered promiscuous mode [ 1400.859558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1400.880617][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1401.002673][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1401.023750][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1401.152659][ T2059] device veth0_vlan entered promiscuous mode [ 1401.823607][ T2059] device veth1_vlan entered promiscuous mode [ 1402.203089][ T2057] device veth0_macvtap entered promiscuous mode [ 1402.467632][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1402.522756][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1402.669069][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1402.812344][ T2057] device veth1_macvtap entered promiscuous mode [ 1404.114183][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1404.192865][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1404.274749][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1404.300158][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1404.580590][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1404.634381][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1404.707427][ T2059] device veth0_macvtap entered promiscuous mode [ 1405.049416][ T2057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.052061][ T2057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.053289][ T2057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.054383][ T2057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.323508][ T2059] device veth1_macvtap entered promiscuous mode [ 1406.043890][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1407.235548][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1407.273371][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1407.534940][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1407.584144][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1407.823398][ T2059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.824772][ T2059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.825844][ T2059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.889837][ T2059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:23:33 executing program 0: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x3) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000040)=0x3) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x3) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6, 0xc9}}, './file0\x00'}) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') r3 = openat2(r2, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x509000, 0x2}, 0x18) symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x80) close(r0) sync_file_range(r3, 0x4, 0x4a427485, 0x3) syz_open_dev$dmmidi(&(0x7f0000000380), 0x174e32af, 0x109180) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000003c0)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000700)=r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000740)=@random={'security.', '/dev/dmmidi#\x00'}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x3) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000040)=0x3) (async) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) (async) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x1) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x3) (async) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6, 0xc9}}, './file0\x00'}) (async) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') (async) openat2(r2, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x509000, 0x2}, 0x18) (async) symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') (async) mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x80) (async) close(r0) (async) sync_file_range(r3, 0x4, 0x4a427485, 0x3) (async) syz_open_dev$dmmidi(&(0x7f0000000380), 0x174e32af, 0x109180) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000003c0)) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000500)) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000700)=r5) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000000740)=@random={'security.', '/dev/dmmidi#\x00'}) (async) 00:23:34 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x4, 0x678, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x62, 0x8035, 'veth0_to_hsr\x00', 'syzkaller1\x00', 'virt_wifi0\x00', 'vcan0\x00', @local, [0x0, 0xff, 0xff, 0x17e, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0xd6, 0x14e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1, 0x2}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0xe0, 0x9, 0x1, 0x0, "9fc1012e1cd1bb512f0ed103b08ee58c9b4cd1cc5fc6537c71bb2601b190493b132e8f25e8e147402317cf33c7a95073349c04f3288e6e8aa7310e7bb9a9e5d1"}}}}, {0x11, 0x10, 0x892f, 'batadv0\x00', 'vlan0\x00', 'geneve1\x00', 'vcan0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x11e, 0x17e, 0x1ae, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'tunl0\x00', {0xff}, 'team0\x00', {}, 0x10, 0x16}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xd, 0x8, 0x955b, 0x8, 0x10000}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x17, 0x14, 0x800, 'nr0\x00', 'syzkaller0\x00', 'veth1_vlan\x00', 'veth0_to_batadv\x00', @broadcast, [0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xf6, 0x12e, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}, @common=@log={'log\x00', 0x28, {{0x7, "8b0895944e62b7a05bd44b634ac83fd122d6f858af287369dd51f94ecc01", 0x1}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}}, {0x11, 0x58, 0xfbfb, 'vlan0\x00', 'veth1_to_batadv\x00', 'veth1\x00', 'ip6tnl0\x00', @empty, [0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x9e, 0x13e, 0x18e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x4, 0x8, 0x2, 0x6}}}], [@common=@log={'log\x00', 0x28, {{0x4, "4013156943fb85e5956ceeeb6f7861a25c5a98118c2607b54c71c5f399c7"}}}, @common=@log={'log\x00', 0x28, {{0x8, "dcc8103aa16182404ce6c1c810c311981a322593d4d9f6f2b1769a66acaf", 0x8}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x3ff, {0x8000000000000000}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x6f0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000740), 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x1e0, 0x1e0, 0x3c8, 0xf0, 0x1e0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f0000000780), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xffffff80], 'batadv0\x00', 'netdevsim0\x00', {0xff}, {}, 0x89, 0x20, 0x6, 0x11}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x14, 0x30, 0x1}}}, {{@ipv6={@loopback, @private1, [0xff, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0x0, 0xffffff00], 'team_slave_1\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0xdc, 0x2, 0xa7}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'syzkaller1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv4=@broadcast, 0xf, 0x1b, 0x9}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'netpci0\x00', 'lo\x00', {0xff}, {}, 0x6c, 0x7, 0x1, 0x12}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@private=0xa010102, 0x25, 0x21, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e00)={0x0, 'syzkaller1\x00', {0x2}, 0xc91e}) (async, rerun: 32) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000e40)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000e80)=0x2c) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'vxcan0\x00'}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000f00)={0x0, 0x3ff}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000f80)={r0, 0x4, 0x10}, &(0x7f0000000fc0)=0xc) (async, rerun: 32) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000001000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001040)=0x28) (async, rerun: 32) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000001080)={'filter\x00', 0xb5, "5e9e0d7eb8e5f9d4cd0b38110e6848a041723c0feab5392cfa698c6650a913285632f840ad3062d9e4dfd1ddae9aaa914bb5671612fdb22b6b790a0fd237f311621962bc47da6c9eaa99cb4ce8dcf63815969763523f63406f1c02f8dee7eec7892d35344cbf18af8b75f3053f077c4222be86ea9baf2924a91aa7177bd08bd66a279190eb8b592d4c7bbeed1e3703dc81a3b07caed99502fdeabeb078e3b5dcae1f91912e506880910a488c1d4b321b071181224f"}, &(0x7f0000001180)=0xd9) (async, rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0), 0x111ac0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000001200)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x4f3, @mcast2, 0xffff}, @in6={0xa, 0x4e24, 0x65, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x4}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1f}], 0x80) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000001280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000012c0)={r3}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000001300)={'bond_slave_1\x00', 0x1}) (async, rerun: 32) r4 = syz_open_dev$vcsu(&(0x7f0000001340), 0x8, 0x80200) (rerun: 32) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000001380)={0x1d}, 0x4) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x105080, 0x0) bind$llc(r5, &(0x7f0000001400)={0x1a, 0x110, 0x2, 0x8c, 0x0, 0x1, @local}, 0x10) 00:23:38 executing program 0: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x3) (async, rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000040)=0x3) (rerun: 64) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x3) (async) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6, 0xc9}}, './file0\x00'}) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') (async) r3 = openat2(r2, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x509000, 0x2}, 0x18) symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') (async) mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x80) (async) close(r0) (async) sync_file_range(r3, 0x4, 0x4a427485, 0x3) (async) syz_open_dev$dmmidi(&(0x7f0000000380), 0x174e32af, 0x109180) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000003c0)) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000700)=r5) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000000740)=@random={'security.', '/dev/dmmidi#\x00'}) 00:23:40 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x4, 0x678, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x62, 0x8035, 'veth0_to_hsr\x00', 'syzkaller1\x00', 'virt_wifi0\x00', 'vcan0\x00', @local, [0x0, 0xff, 0xff, 0x17e, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0xd6, 0x14e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1, 0x2}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0xe0, 0x9, 0x1, 0x0, "9fc1012e1cd1bb512f0ed103b08ee58c9b4cd1cc5fc6537c71bb2601b190493b132e8f25e8e147402317cf33c7a95073349c04f3288e6e8aa7310e7bb9a9e5d1"}}}}, {0x11, 0x10, 0x892f, 'batadv0\x00', 'vlan0\x00', 'geneve1\x00', 'vcan0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x11e, 0x17e, 0x1ae, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'tunl0\x00', {0xff}, 'team0\x00', {}, 0x10, 0x16}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xd, 0x8, 0x955b, 0x8, 0x10000}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x17, 0x14, 0x800, 'nr0\x00', 'syzkaller0\x00', 'veth1_vlan\x00', 'veth0_to_batadv\x00', @broadcast, [0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xf6, 0x12e, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}, @common=@log={'log\x00', 0x28, {{0x7, "8b0895944e62b7a05bd44b634ac83fd122d6f858af287369dd51f94ecc01", 0x1}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}}, {0x11, 0x58, 0xfbfb, 'vlan0\x00', 'veth1_to_batadv\x00', 'veth1\x00', 'ip6tnl0\x00', @empty, [0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x9e, 0x13e, 0x18e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x4, 0x8, 0x2, 0x6}}}], [@common=@log={'log\x00', 0x28, {{0x4, "4013156943fb85e5956ceeeb6f7861a25c5a98118c2607b54c71c5f399c7"}}}, @common=@log={'log\x00', 0x28, {{0x8, "dcc8103aa16182404ce6c1c810c311981a322593d4d9f6f2b1769a66acaf", 0x8}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x3ff, {0x8000000000000000}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x6f0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000740), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x1e0, 0x1e0, 0x3c8, 0xf0, 0x1e0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f0000000780), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffffff, 0xffffff80], 'batadv0\x00', 'netdevsim0\x00', {0xff}, {}, 0x89, 0x20, 0x6, 0x11}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x14, 0x30, 0x1}}}, {{@ipv6={@loopback, @private1, [0xff, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0x0, 0xffffff00], 'team_slave_1\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0xdc, 0x2, 0xa7}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'syzkaller1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv4=@broadcast, 0xf, 0x1b, 0x9}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'netpci0\x00', 'lo\x00', {0xff}, {}, 0x6c, 0x7, 0x1, 0x12}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@private=0xa010102, 0x25, 0x21, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e00)={0x0, 'syzkaller1\x00', {0x2}, 0xc91e}) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000e40)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000e80)=0x2c) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'vxcan0\x00'}) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000f00)={0x0, 0x3ff}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000f80)={r0, 0x4, 0x10}, &(0x7f0000000fc0)=0xc) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000001000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001040)=0x28) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000001080)={'filter\x00', 0xb5, "5e9e0d7eb8e5f9d4cd0b38110e6848a041723c0feab5392cfa698c6650a913285632f840ad3062d9e4dfd1ddae9aaa914bb5671612fdb22b6b790a0fd237f311621962bc47da6c9eaa99cb4ce8dcf63815969763523f63406f1c02f8dee7eec7892d35344cbf18af8b75f3053f077c4222be86ea9baf2924a91aa7177bd08bd66a279190eb8b592d4c7bbeed1e3703dc81a3b07caed99502fdeabeb078e3b5dcae1f91912e506880910a488c1d4b321b071181224f"}, &(0x7f0000001180)=0xd9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0), 0x111ac0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000001200)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x4f3, @mcast2, 0xffff}, @in6={0xa, 0x4e24, 0x65, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x4}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1f}], 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000001280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000012c0)={r3}) (async, rerun: 64) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000001300)={'bond_slave_1\x00', 0x1}) (async, rerun: 64) r4 = syz_open_dev$vcsu(&(0x7f0000001340), 0x8, 0x80200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000001380)={0x1d}, 0x4) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x105080, 0x0) bind$llc(r5, &(0x7f0000001400)={0x1a, 0x110, 0x2, 0x8c, 0x0, 0x1, @local}, 0x10) 00:23:44 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xb0, 0x95, [{{0x9, 0x4, 0x0, 0x61, 0x1, 0x3, 0x1, 0x2, 0xf3, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0x797}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0x38}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x40, 0x8, 0x3f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x7, 0x0, 0x40, 0x4f}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x53a, 0xf000, 0xfff9, [0x0, 0x3f00, 0xf, 0xff00c0, 0xcf, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3ffc00, 0x0, 0x3, [0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x1, 0x7f}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}]}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/209, 0xd1, &(0x7f00000004c0)=""/100, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) readv(r2, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/50, 0x32}], 0x3) 00:23:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ftruncate(r0, 0xa00005) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xe01a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r2, &(0x7f0000000300)="f94d6c68789807bbd244fee7804d9ff88d8a88fc900b03de92e29f368fa905f70ace4398fc2f073c7af5f769c5a14cb728712a", 0xffffffffffffff83, 0x4040, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x4000000000) sendfile(r2, r1, 0x0, 0x80000000008002) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x8}) [ 1428.360848][ T2659] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1428.691732][ T2659] usb 1-1: Using ep0 maxpacket: 8 [ 1428.872821][ T2659] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1428.875709][ T2659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.374474][ T2659] usb 1-1: config 0 descriptor?? [ 1429.820094][ T2659] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input0 [ 1430.985642][ T2779] UDC core: couldn't find an available UDC or it's busy: -16 [ 1431.015030][ T2779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1431.154134][ T2779] fs-verity: sha256 using implementation "sha256-generic" 00:23:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ftruncate(r0, 0xa00005) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xe01a) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet6(r2, &(0x7f0000000300)="f94d6c68789807bbd244fee7804d9ff88d8a88fc900b03de92e29f368fa905f70ace4398fc2f073c7af5f769c5a14cb728712a", 0xffffffffffffff83, 0x4040, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x4000000000) sendfile(r2, r1, 0x0, 0x80000000008002) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x8}) [ 1435.310235][ T2768] bcm5974 1-1:0.0: could not read from device [ 1435.620179][ T2680] usb 1-1: USB disconnect, device number 2 00:23:57 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) (async, rerun: 32) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xb0, 0x95, [{{0x9, 0x4, 0x0, 0x61, 0x1, 0x3, 0x1, 0x2, 0xf3, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0x797}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0x38}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x40, 0x8, 0x3f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x7, 0x0, 0x40, 0x4f}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x53a, 0xf000, 0xfff9, [0x0, 0x3f00, 0xf, 0xff00c0, 0xcf, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3ffc00, 0x0, 0x3, [0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x1, 0x7f}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}]}) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/209, 0xd1, &(0x7f00000004c0)=""/100, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) readv(r2, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/50, 0x32}], 0x3) [ 1440.873489][ T2800] UDC core: couldn't find an available UDC or it's busy: -16 [ 1440.874949][ T2800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1441.000979][ T2742] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1441.319506][ T2742] usb 1-1: Using ep0 maxpacket: 8 [ 1441.620918][ T2742] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1441.622589][ T2742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.951542][ T2742] usb 1-1: config 0 descriptor?? 00:24:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) (async) ftruncate(r0, 0xa00005) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xe01a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) sendto$inet6(r2, &(0x7f0000000300)="f94d6c68789807bbd244fee7804d9ff88d8a88fc900b03de92e29f368fa905f70ace4398fc2f073c7af5f769c5a14cb728712a", 0xffffffffffffff83, 0x4040, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x4000000000) (async) sendfile(r2, r1, 0x0, 0x80000000008002) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x8}) (rerun: 32) [ 1443.019427][ T2742] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input1 [ 1448.181004][ T2742] bcm5974 1-1:0.0: could not read from device 00:24:07 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xb0, 0x95, [{{0x9, 0x4, 0x0, 0x61, 0x1, 0x3, 0x1, 0x2, 0xf3, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0x797}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0x38}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x40, 0x8, 0x3f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x7, 0x0, 0x40, 0x4f}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x53a, 0xf000, 0xfff9, [0x0, 0x3f00, 0xf, 0xff00c0, 0xcf, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3ffc00, 0x0, 0x3, [0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x1, 0x7f}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}]}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/209, 0xd1, &(0x7f00000004c0)=""/100, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) readv(r2, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/50, 0x32}], 0x3) [ 1448.448665][ T2742] input: failed to attach handler mousedev to device input1, error: -5 [ 1448.697823][ T2742] usb 1-1: USB disconnect, device number 3 [ 1451.779206][ T2659] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1452.150001][ T2659] usb 2-1: Using ep0 maxpacket: 8 [ 1452.350410][ T2659] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1452.352969][ T2659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.475025][ T2659] usb 2-1: config 0 descriptor?? [ 1452.872451][ T2659] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input2 [ 1454.891947][ T2830] UDC core: couldn't find an available UDC or it's busy: -16 [ 1454.893234][ T2830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1458.034248][ T2659] bcm5974 2-1:0.0: could not read from device [ 1459.171681][ T2659] input: failed to attach handler mousedev to device input2, error: -5 [ 1459.383854][ C0] ================================================================== [ 1459.385067][ C0] BUG: KASAN: use-after-free in __bfs+0x154/0x394 [ 1459.388401][ C0] Read of size 8 at addr ffffaf801098bd50 by task kworker/0:3/2659 [ 1459.391381][ C0] [ 1459.392681][ C0] CPU: 0 PID: 2659 Comm: kworker/0:3 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1459.394391][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1459.395704][ C0] Workqueue: usb_hub_wq hub_event [ 1459.397600][ C0] Call Trace: [ 1459.398453][ C0] [] dump_backtrace+0x2e/0x3c [ 1459.399639][ C0] [] show_stack+0x34/0x40 [ 1459.400739][ C0] [] dump_stack_lvl+0xe4/0x150 [ 1459.402567][ C0] [] print_address_description.constprop.0+0x2a/0x330 [ 1459.404061][ C0] [] kasan_report+0x184/0x1e0 [ 1459.405205][ C0] [] __asan_load8+0x6e/0x96 [ 1459.406932][ C0] [] __bfs+0x154/0x394 [ 1459.408657][ C0] [] check_path.constprop.0+0x24/0x46 [ 1459.409941][ C0] [] check_noncircular+0x11a/0x1fe [ 1459.411105][ C0] [] __lock_acquire+0x19a4/0x333e [ 1459.412421][ C0] [] lock_acquire.part.0+0x1d0/0x424 [ 1459.414022][ C0] [ 1459.414742][ C0] Allocated by task 14: [ 1459.415474][ C0] (stack is not available) [ 1459.416836][ C0] [ 1459.417576][ C0] Last potentially related work creation: [ 1459.418917][ C0] stack_trace_save+0xa6/0xd8 [ 1459.419991][ C0] kasan_save_stack+0x2c/0x58 [ 1459.420993][ C0] __kasan_slab_alloc+0x8e/0x98 [ 1459.422402][ C0] kmem_cache_alloc+0x338/0x3de [ 1459.423905][ C0] __kernfs_new_node+0xfc/0x5f2 [ 1459.424930][ C0] kernfs_new_node+0x66/0xbe [ 1459.425794][ C0] __kernfs_create_file+0x4e/0x1e8 [ 1459.427124][ C0] sysfs_add_file_mode_ns+0x138/0x254 [ 1459.428645][ C0] internal_create_group+0x274/0x722 [ 1459.429648][ C0] sysfs_create_group+0x22/0x2e [ 1459.430598][ C0] numa_init_sysfs+0x76/0xc0 [ 1459.431491][ C0] do_one_initcall+0x13a/0x7ea [ 1459.432359][ C0] kernel_init_freeable+0x510/0x5b4 [ 1459.433299][ C0] kernel_init+0x28/0x21c [ 1459.434200][ C0] ret_from_exception+0x0/0x10 [ 1459.435161][ C0] [ 1459.435672][ C0] The buggy address belongs to the object at ffffaf801098bc00 [ 1459.435672][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1459.438453][ C0] The buggy address is located 336 bytes inside of [ 1459.438453][ C0] 512-byte region [ffffaf801098bc00, ffffaf801098be00) [ 1459.441044][ C0] The buggy address belongs to the page: [ 1459.442844][ C0] page:ffffaf807aaf3e40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x90b88 [ 1459.445373][ C0] head:ffffaf807aaf3e40 order:2 compound_mapcount:0 compound_pincount:0 [ 1459.447455][ C0] flags: 0x9000010200(slab|head|section=18|node=0|zone=0) [ 1459.450820][ C0] raw: 0000009000010200 0000000000000100 0000000000000122 ffffaf8007201c80 [ 1459.452830][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1459.454651][ C0] raw: 00000000000007ff [ 1459.455967][ C0] page dumped because: kasan: bad access detected [ 1459.457613][ C0] page_owner tracks the page as allocated [ 1459.458811][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2057, ts 1329585891100, free_ts 1316951447000 [ 1459.462853][ C0] __set_page_owner+0x48/0x136 [ 1459.464304][ C0] post_alloc_hook+0xd0/0x10a [ 1459.465744][ C0] get_page_from_freelist+0x8da/0x12d8 [ 1459.467452][ C0] __alloc_pages+0x150/0x3b6 [ 1459.468741][ C0] alloc_pages+0x132/0x2a6 [ 1459.470002][ C0] alloc_slab_page.constprop.0+0xc2/0xfa [ 1459.471607][ C0] new_slab+0x25a/0x2cc [ 1459.472916][ C0] ___slab_alloc+0x56e/0x918 [ 1459.474351][ C0] __slab_alloc.constprop.0+0x50/0x8c [ 1459.475701][ C0] __kmalloc_node_track_caller+0x26c/0x362 [ 1459.477366][ C0] __alloc_skb+0xee/0x2e4 [ 1459.478654][ C0] inet6_netconf_notify_devconf+0xb6/0x1f2 [ 1459.480224][ C0] addrconf_sysctl_unregister+0xaa/0xdc [ 1459.481939][ C0] addrconf_notify+0x50e/0x1360 [ 1459.483567][ C0] notifier_call_chain+0xb8/0x188 [ 1459.485294][ C0] raw_notifier_call_chain+0x2a/0x38 [ 1459.486981][ C0] page last free stack trace: [ 1459.488162][ C0] __reset_page_owner+0x4a/0xea [ 1459.489861][ C0] free_pcp_prepare+0x29c/0x45e [ 1459.491503][ C0] free_unref_page+0x6a/0x31e [ 1459.492865][ C0] __free_pages+0xe2/0x112 [ 1459.494173][ C0] __free_slab+0x122/0x27c [ 1459.495659][ C0] discard_slab+0x4c/0x7a [ 1459.496931][ C0] __slab_free+0x20a/0x29c [ 1459.498275][ C0] ___cache_free+0x17c/0x354 [ 1459.499788][ C0] qlist_free_all+0x7c/0x132 [ 1459.501070][ C0] kasan_quarantine_reduce+0x14c/0x1c8 [ 1459.502693][ C0] __kasan_slab_alloc+0x5c/0x98 [ 1459.504227][ C0] kmem_cache_alloc_trace+0x278/0x2e0 [ 1459.506301][ C0] __ipv6_dev_mc_inc+0x2c4/0x924 [ 1459.508056][ C0] ipv6_dev_mc_inc+0x22/0x2e [ 1459.509598][ C0] ipv6_add_dev+0x64e/0xa7e [ 1459.511072][ C0] addrconf_notify+0x5e8/0x1360 [ 1459.512811][ C0] [ 1459.513656][ C0] Memory state around the buggy address: [ 1459.515370][ C0] ffffaf801098bc00: f1 f1 f1 f1 00 f3 f3 f3 fb fb fb fb fb fb fb fb [ 1459.517334][ C0] ffffaf801098bc80: fb fb fb fb fb fb fb fb fb fb fb fb 00 00 00 00 [ 1459.519213][ C0] >ffffaf801098bd00: f1 f1 f1 f1 00 f2 f2 f2 fb fb fb fb 00 00 00 f3 [ 1459.520795][ C0] ^ [ 1459.522545][ C0] ffffaf801098bd80: f3 f3 f3 f3 fb fb fb fb fb fb fb fb fb fb fb fb [ 1459.524284][ C0] ffffaf801098be00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1459.526123][ C0] ================================================================== [ 1459.527807][ C0] Disabling lock debugging due to kernel taint 00:24:18 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xb0, 0x95, [{{0x9, 0x4, 0x0, 0x61, 0x1, 0x3, 0x1, 0x2, 0xf3, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0x797}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0x38}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x40, 0x8, 0x3f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x7, 0x0, 0x40, 0x4f}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x53a, 0xf000, 0xfff9, [0x0, 0x3f00, 0xf, 0xff00c0, 0xcf, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3ffc00, 0x0, 0x3, [0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x1, 0x7f}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}]}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/209, 0xd1, &(0x7f00000004c0)=""/100, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) readv(r2, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/50, 0x32}], 0x3) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xb0, 0x95, [{{0x9, 0x4, 0x0, 0x61, 0x1, 0x3, 0x1, 0x2, 0xf3, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0x797}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0x38}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x40, 0x8, 0x3f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x7, 0x0, 0x40, 0x4f}, 0x4a, &(0x7f0000000100)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x53a, 0xf000, 0xfff9, [0x0, 0x3f00, 0xf, 0xff00c0, 0xcf, 0x3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3ffc00, 0x0, 0x3, [0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x1, 0x7f}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x813}}]}) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/209, 0xd1, &(0x7f00000004c0)=""/100, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) (async) readv(r2, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/50, 0x32}], 0x3) (async) [ 1459.533935][ T2659] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 1459.535372][ T2659] CPU: 0 PID: 2659 Comm: kworker/0:3 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1459.537793][ T2659] Hardware name: riscv-virtio,qemu (DT) [ 1459.539067][ T2659] Workqueue: usb_hub_wq hub_event [ 1459.540603][ T2659] Call Trace: [ 1459.541231][ T2659] [] dump_backtrace+0x2e/0x3c [ 1459.542341][ T2659] [] show_stack+0x34/0x40 [ 1459.543414][ T2659] [] dump_stack_lvl+0xe4/0x150 [ 1459.544567][ T2659] [] dump_stack+0x1c/0x24 [ 1459.545650][ T2659] [] panic+0x24a/0x634 [ 1459.547177][ T2659] [] schedule+0x0/0x14c [ 1459.548332][ T2659] [] preempt_schedule_irq+0x4a/0x13e [ 1459.549535][ T2659] [] resume_kernel+0x16/0x18 [ 1459.551104][ T2659] SMP: stopping secondary CPUs [ 1459.553343][ T2659] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:23:13 Registers: info registers vcpu 0 pc ffffffff8010b22c mhartid 0000000000000000 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8050a192 sepc ffffffff8050a192 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff831a18d8 x2/sp ffffaf800e6af3a0 x3/gp ffffffff85863ac0 x4/tp ffffaf800b973080 x5/t0 0000000000046000 x6/t1 ffffffff8545ae40 x7/t2 00007fffe8b481b7 x8/s0 ffffaf800e6af3b0 x9/s1 0000000000001000 x10/a0 0000000000000120 x11/a1 ffffffffffffffff x12/a2 1ffff5f00b53eb61 x13/a3 ffffffff8015446c x14/a4 0000000000010000 x15/a5 0000000000000000 x16/a6 ffffaf805a9f59d2 x17/a7 ffffffffffffffff x18/s2 ffffffff86c1a620 x19/s3 ffffffff84b787b0 x20/s4 0000000000000000 x21/s5 ffffffff8343c840 x22/s6 ffffffffffffffff x23/s7 ffffaf805a9f59d8 x24/s8 ffffffff86c1a620 x25/s9 ffffaf800b973080 x26/s10 ffffffff858296b8 x27/s11 ffffaf800e6af5a0 x28/t3 fffffffff3f3f300 x29/t4 fffffffef0d81e13 x30/t5 fffffffef0d81e1a x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 4047d851ec9f2c9a f2/ft2 41051f8000000000 f3/ft3 414e030200000000 f4/ft4 4024000000000000 f5/ft5 4034000000000000 f6/ft6 3fe0000000000000 f7/ft7 3f999999999999a0 f8/fs0 3fedab896cf6b2f0 f9/fs1 3f9bc87766b5afe0 f10/fa0 bf24809530ede680 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80dc337e mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80475986 sepc ffffffff80173ff0 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc337e x2/sp ffffaf801098b5f0 x3/gp ffffffff85863ac0 x4/tp ffffaf80102848c0 x5/t0 ffffffff86bcb657 x6/t1 fffffffff3f3f3f3 x7/t2 0000000000000000 x8/s0 ffffaf801098b620 x9/s1 ffffffff86e58900 x10/a0 ffffffff86e58948 x11/a1 ffff8f800066c000 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc337e x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 7dafb130036e3a00 x18/s2 ffff8f800066c000 x19/s3 0000000000000066 x20/s4 ffffffff86e58900 x21/s5 ffffffff80dc333e x22/s6 0000000000000000 x23/s7 ffffffff86bcb698 x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 ffffffff801163b2 x29/t4 fffffffef0d796c8 x30/t5 fffffffef0d796cb x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000