syzkaller login: [ 233.815941][ T2896] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 233.866112][ T2896] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 251.141292][ T2896] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:28384' (ECDSA) to the list of known hosts. 1970/01/01 00:04:41 fuzzer started 1970/01/01 00:04:52 dialing manager at localhost:43739 1970/01/01 00:04:56 syscalls: 2768 1970/01/01 00:04:56 code coverage: enabled 1970/01/01 00:04:56 comparison tracing: enabled 1970/01/01 00:04:56 extra coverage: enabled 1970/01/01 00:04:56 setuid sandbox: enabled 1970/01/01 00:04:56 namespace sandbox: enabled 1970/01/01 00:04:56 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:04:56 fault injection: enabled 1970/01/01 00:04:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:04:56 net packet injection: enabled 1970/01/01 00:04:56 net device setup: enabled 1970/01/01 00:04:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:04:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:04:56 USB emulation: enabled 1970/01/01 00:04:56 hci packet injection: /dev/vhci does not exist 1970/01/01 00:04:56 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:04:56 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:00 fetching corpus: 50, signal 21907/23625 (executing program) 1970/01/01 00:05:03 fetching corpus: 100, signal 27821/31093 (executing program) 1970/01/01 00:05:05 fetching corpus: 150, signal 32811/37562 (executing program) 1970/01/01 00:05:07 fetching corpus: 200, signal 35032/41280 (executing program) 1970/01/01 00:05:08 fetching corpus: 250, signal 37609/45272 (executing program) 1970/01/01 00:05:10 fetching corpus: 300, signal 42544/51365 (executing program) 1970/01/01 00:05:13 fetching corpus: 350, signal 45929/55880 (executing program) 1970/01/01 00:05:15 fetching corpus: 400, signal 51017/61860 (executing program) 1970/01/01 00:05:17 fetching corpus: 450, signal 52868/64833 (executing program) 1970/01/01 00:05:19 fetching corpus: 500, signal 54408/67513 (executing program) 1970/01/01 00:05:20 fetching corpus: 550, signal 56382/70499 (executing program) 1970/01/01 00:05:22 fetching corpus: 600, signal 58297/73424 (executing program) 1970/01/01 00:05:24 fetching corpus: 650, signal 60151/76278 (executing program) 1970/01/01 00:05:26 fetching corpus: 700, signal 62141/79199 (executing program) 1970/01/01 00:05:29 fetching corpus: 750, signal 68337/85429 (executing program) 1970/01/01 00:05:31 fetching corpus: 800, signal 69431/87442 (executing program) 1970/01/01 00:05:33 fetching corpus: 850, signal 70413/89354 (executing program) 1970/01/01 00:05:35 fetching corpus: 900, signal 71866/91575 (executing program) 1970/01/01 00:05:37 fetching corpus: 950, signal 72980/93508 (executing program) 1970/01/01 00:05:38 fetching corpus: 1000, signal 73772/95171 (executing program) 1970/01/01 00:05:39 fetching corpus: 1050, signal 74822/97048 (executing program) 1970/01/01 00:05:41 fetching corpus: 1100, signal 76028/98997 (executing program) 1970/01/01 00:05:43 fetching corpus: 1150, signal 77568/101189 (executing program) 1970/01/01 00:05:45 fetching corpus: 1200, signal 78329/102737 (executing program) 1970/01/01 00:05:47 fetching corpus: 1250, signal 79550/104594 (executing program) 1970/01/01 00:05:48 fetching corpus: 1300, signal 80740/106424 (executing program) 1970/01/01 00:05:52 fetching corpus: 1350, signal 81787/108073 (executing program) 1970/01/01 00:05:54 fetching corpus: 1400, signal 84208/110576 (executing program) 1970/01/01 00:05:56 fetching corpus: 1450, signal 85089/112103 (executing program) 1970/01/01 00:06:00 fetching corpus: 1500, signal 86055/113639 (executing program) 1970/01/01 00:06:02 fetching corpus: 1550, signal 86665/114912 (executing program) 1970/01/01 00:06:04 fetching corpus: 1600, signal 87209/116188 (executing program) 1970/01/01 00:06:06 fetching corpus: 1650, signal 88346/117748 (executing program) 1970/01/01 00:06:08 fetching corpus: 1700, signal 88885/118940 (executing program) 1970/01/01 00:06:10 fetching corpus: 1750, signal 90810/120867 (executing program) 1970/01/01 00:06:12 fetching corpus: 1800, signal 91697/122190 (executing program) 1970/01/01 00:06:13 fetching corpus: 1850, signal 92104/123238 (executing program) 1970/01/01 00:06:15 fetching corpus: 1900, signal 93411/124728 (executing program) 1970/01/01 00:06:17 fetching corpus: 1950, signal 94213/125939 (executing program) 1970/01/01 00:06:19 fetching corpus: 2000, signal 95133/127256 (executing program) 1970/01/01 00:06:20 fetching corpus: 2050, signal 95755/128381 (executing program) 1970/01/01 00:06:22 fetching corpus: 2100, signal 96426/129471 (executing program) 1970/01/01 00:06:24 fetching corpus: 2150, signal 97062/130541 (executing program) 1970/01/01 00:06:26 fetching corpus: 2200, signal 98430/131945 (executing program) 1970/01/01 00:06:28 fetching corpus: 2250, signal 98892/132927 (executing program) 1970/01/01 00:06:30 fetching corpus: 2300, signal 99396/133923 (executing program) 1970/01/01 00:06:31 fetching corpus: 2350, signal 99804/134850 (executing program) 1970/01/01 00:06:33 fetching corpus: 2400, signal 100623/135928 (executing program) 1970/01/01 00:06:35 fetching corpus: 2450, signal 101101/136886 (executing program) 1970/01/01 00:06:37 fetching corpus: 2500, signal 101664/137832 (executing program) 1970/01/01 00:06:39 fetching corpus: 2550, signal 102083/138689 (executing program) 1970/01/01 00:06:41 fetching corpus: 2600, signal 102521/139552 (executing program) 1970/01/01 00:06:42 fetching corpus: 2650, signal 103204/140459 (executing program) 1970/01/01 00:06:43 fetching corpus: 2700, signal 103658/141331 (executing program) 1970/01/01 00:06:45 fetching corpus: 2750, signal 104415/142276 (executing program) 1970/01/01 00:06:47 fetching corpus: 2800, signal 104979/143175 (executing program) 1970/01/01 00:06:48 fetching corpus: 2826, signal 105135/143889 (executing program) 1970/01/01 00:06:48 fetching corpus: 2826, signal 105135/144572 (executing program) 1970/01/01 00:06:48 fetching corpus: 2826, signal 105135/145267 (executing program) 1970/01/01 00:06:49 fetching corpus: 2826, signal 105135/145961 (executing program) 1970/01/01 00:06:49 fetching corpus: 2826, signal 105135/146682 (executing program) 1970/01/01 00:06:49 fetching corpus: 2826, signal 105135/147353 (executing program) 1970/01/01 00:06:49 fetching corpus: 2826, signal 105135/148021 (executing program) 1970/01/01 00:06:49 fetching corpus: 2826, signal 105135/148694 (executing program) 1970/01/01 00:06:50 fetching corpus: 2826, signal 105135/149392 (executing program) 1970/01/01 00:06:50 fetching corpus: 2826, signal 105135/150075 (executing program) 1970/01/01 00:06:50 fetching corpus: 2826, signal 105135/150783 (executing program) 1970/01/01 00:06:50 fetching corpus: 2826, signal 105135/151463 (executing program) 1970/01/01 00:06:50 fetching corpus: 2826, signal 105135/152128 (executing program) 1970/01/01 00:06:50 fetching corpus: 2826, signal 105135/152755 (executing program) 1970/01/01 00:06:51 fetching corpus: 2826, signal 105135/153407 (executing program) 1970/01/01 00:06:51 fetching corpus: 2826, signal 105135/154097 (executing program) 1970/01/01 00:06:51 fetching corpus: 2826, signal 105135/154779 (executing program) 1970/01/01 00:06:51 fetching corpus: 2826, signal 105135/155419 (executing program) 1970/01/01 00:06:51 fetching corpus: 2826, signal 105135/156089 (executing program) 1970/01/01 00:06:51 fetching corpus: 2826, signal 105135/156782 (executing program) 1970/01/01 00:06:52 fetching corpus: 2826, signal 105135/157415 (executing program) 1970/01/01 00:06:52 fetching corpus: 2826, signal 105135/158074 (executing program) 1970/01/01 00:06:52 fetching corpus: 2826, signal 105135/158648 (executing program) 1970/01/01 00:06:52 fetching corpus: 2826, signal 105135/158648 (executing program) 1970/01/01 00:08:17 starting 2 fuzzer processes 00:08:35 executing program 0: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x1, 0x1, 0xc4}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.log\x00', 0x480400, 0x4) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)="d6b7346b74f6d139c002851a6c297bdfa5eae732980bb075a7aca5caf902393237b2802a12fcd88b2197751cfae89bc3e39b03f46a387f52ac537a99f7ec782dc914945537d50836e83d49f94429ce3b0de7fdfde851ba335d43e3af54e01cd675b71f4991fec529b7ca7d0fba2233209e8cef1cf578107f5e406c7e22", 0x7d}, {&(0x7f0000000580)="e7281b1b4c9bfe9c6556c541e9a4270ad30e1b868175499d9bae65481edb40971fe1f66a91adcaebea791fbd0a8e7b49ad994c10417fff61e75e99347256724eed7184b7b58b31e690e83b0a6838dbe37679166982ca050631fc29c316faae50801324ffddf20d9566b1c9715f068f4c12f4f1e3dbb9bf1645b55d09950db46b3ebc1cc58ef57201426a5aeb53c55192ccb5222e8fa18dd5a46ae8977317de41c532fbf31516bd48e50ca1915dc4623c498c26722244c644b7819745eec868c83ff39b3ad3680135bcc28bf5fabc6fb381dbe10a9d414657dd8db7e639", 0xdd}, {&(0x7f0000000680)="d622759d7529aa150c79943f75661cb12a5facc4473f6afad60e9dff52d875", 0x1f}, {&(0x7f00000006c0)="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", 0xfb}, {&(0x7f00000007c0)="63ab8abec020cb8c924c2a98e7ed9c590d5bf0d4adb46c6b3020b51e4b4ffceca9fa336276dac32fef3ea285bea4a2649c18fd7d17a2b1095410032a51c4ccd902d07c43177ffdbe05bd68b0aa5a234a0c763d12", 0x54}, {&(0x7f0000000840)="ba0f1ac86fe87f5b98ca98580fc341a83c30ab8edc005a4a775ffe8cd019d358139a41e0ec093ef61aad061a7694f8d73b200caafb377e2fbd966a2181cd35eac49ce57b531f4a759c6d76591f85e872e9fcf59a5e153bf0119e893d10ade36b10a1d40154de5d74b52f2e9a352cb330e65669b2f62022972a2739a5c03ace28d5572012a919af40bec286536788b21a863555d56d81d55f06fb8de5d7f88f45207142f91b3bedf69f5106b16a23666f845f6343a053a4ebe3e1891eac028765830e299119614fb6dc4ca896c33cafe9", 0xd0}], 0x6, 0x0, 0x0, 0x48800}, 0x4010010) fcntl$getownex(r0, 0x10, &(0x7f0000000a00)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$key(0xf, 0x3, 0x2) flistxattr(r1, &(0x7f0000000a40)=""/188, 0xbc) r2 = accept$unix(r0, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000bc0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000c00)=0x2c) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000c40)="b289e16d89a64c5f1fd4499b3317931693d2ffe3fdb6deb3b550d22804980ee9969ed1d0ecf2d9319e9c2c5cc35836ef52cd9eb98cd316ed2dc7cb25cf47a86f03feb2d92884641415c8217d5a1dd34712b5dc301eb63b6786db49170c741c38e8e9d0c8ab335f2c8109f4e2c5d4162b32", 0x71) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002a80)={'wg0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002ac0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000002bc0)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000002d00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x9c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002e00)={'sit0\x00', &(0x7f0000002d80)={'syztnl1\x00', r3, 0x2f, 0x0, 0x7f, 0x6, 0x8, @mcast2, @loopback, 0x7, 0x8, 0x2, 0x6ab6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000057c0)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005a00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000059c0)={&(0x7f0000005800)={0x1b4, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x100, 0x9b, 0x20, 0x7fe0}, {0x7, 0x8, 0x0, 0x2}]}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x60}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8040}, 0x800) getpeername$unix(0xffffffffffffffff, &(0x7f0000005a40)=@abs, &(0x7f0000005ac0)=0x6e) read(0xffffffffffffffff, &(0x7f0000005b40)=""/195, 0xc3) 00:08:56 executing program 1: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xff, 0x6, 0x6, 0xffffffff}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x8000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x82) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400800, 0x0) r3 = dup(0xffffffffffffffff) r4 = dup(0xffffffffffffffff) r5 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x1f, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffc0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000500)="2f6d0d5b1b4e625fb375513fbded4f106a75a13c0dcf18e6bc9e6104c0c4e70fa7c84cf6251f4ca5c132bc208f9b8aebdbeac5493191e5bed52041761ea91b102f00ac6a18f233ab57", 0x49) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x0, 0x3, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x65, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0x97, [@empty, @loopback, @broadcast, @empty, @rand_addr=0x64010102, @multicast1, @loopback]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2fc, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x4, 0x7, 0x21, 0x401}, {0x1ff, 0x0, 0x20}, {0x69de, 0x2, 0x6, 0x3}, {0x2, 0x6f, 0x0, 0x8000}, {0x44b, 0x1, 0x7f, 0x8f3}]}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) open_by_handle_at(r2, &(0x7f0000000a80)={0x3a, 0x6, "a13167e6bc0ef2ac3e1314c6423dc6dcf553dfaa5c834baf3e8e5741b49e090ef8638db41f5ca29264c0ec019de30a5c740f"}, 0x660382) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000c80)=0x1, 0x4) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000cc0)={0x2, 0x2, 0xfffffc00, 0x800, 0x9, 0x5}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) [ 541.067506][ T3084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.235676][ T3084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.429576][ T3084] device hsr_slave_0 entered promiscuous mode [ 549.485839][ T3084] device hsr_slave_1 entered promiscuous mode [ 553.423862][ T3084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.558861][ T3084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 553.650088][ T3084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 553.777827][ T3084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 562.675698][ T3084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.019613][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 563.073443][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.775959][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.841723][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 569.050855][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 569.075287][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.656204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 569.774007][ T3227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.869979][ T3227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.479158][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.933976][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.979914][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 571.150730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 571.175158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 571.334568][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 572.268731][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 572.275817][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.479998][ T3227] device hsr_slave_0 entered promiscuous mode [ 579.550150][ T3227] device hsr_slave_1 entered promiscuous mode [ 579.596496][ T3227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.620304][ T3227] Cannot create hsr debugfs directory [ 583.887560][ T3227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 583.976493][ T3227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.100139][ T3227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.187775][ T3227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 584.841179][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 584.936375][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 590.309915][ T2832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 590.349576][ T2832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.386970][ T2832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.398371][ T2832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 590.488663][ T3084] device veth0_vlan entered promiscuous mode [ 590.954123][ T3084] device veth1_vlan entered promiscuous mode [ 592.125430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 592.221706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 592.451594][ T3084] device veth0_macvtap entered promiscuous mode [ 592.819688][ T3084] device veth1_macvtap entered promiscuous mode [ 593.949050][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 593.993724][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.218247][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 594.265808][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.629602][ T3084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.653759][ T3084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.655488][ T3084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.656703][ T3084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.940926][ T3227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.646398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.668357][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.549777][ T3084] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation 00:10:00 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/vcsa\x00', 0x107100, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x0, 0x0) read(r1, &(0x7f00000009c0)=""/234, 0xea) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000)) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) [ 602.624892][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.665825][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 603.359533][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.379375][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 603.415743][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 603.648305][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 604.225398][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.280032][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.465638][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.506655][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 604.658932][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 605.555580][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.559992][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:10:05 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/vcsa\x00', 0x107100, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x0, 0x0) read(r1, &(0x7f00000009c0)=""/234, 0xea) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000)) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 00:10:09 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/vcsa\x00', 0x107100, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x0, 0x0) read(r1, &(0x7f00000009c0)=""/234, 0xea) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000)) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) [ 618.824405][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.895697][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 623.397709][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 623.441770][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 623.517170][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 623.557411][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 623.679505][ T3227] device veth0_vlan entered promiscuous mode [ 624.094416][ T3227] device veth1_vlan entered promiscuous mode [ 624.938037][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.998003][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 625.180055][ T3227] device veth0_macvtap entered promiscuous mode [ 625.427147][ T3227] device veth1_macvtap entered promiscuous mode [ 625.636929][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 625.676576][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.186408][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.261149][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.524260][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.551319][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.769740][ T3227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.774384][ T3227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.776259][ T3227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.777943][ T3227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:10:30 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80400) 00:10:30 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33313930313834363600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000005566cbb705fc4d7ea1c5dfc95b00bfe3010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d1f4655fd1f4655fd1f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d1f4655fd1f4655fd1f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x0, @desc1='\x00\x00\x11\x11\"\"33'}) [ 633.399725][ T3552] loop0: detected capacity change from 0 to 512 [ 635.021407][ T3552] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:10:33 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'dummy0\x00', {'netpci0\x00'}, 0xe}) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 00:10:36 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33313930313834363600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000005566cbb705fc4d7ea1c5dfc95b00bfe3010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d1f4655fd1f4655fd1f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d1f4655fd1f4655fd1f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000002000200000000000800030000000af30100040000000000000000000000010000001f00000000000000000000000000000000000000000000000000000000000000000000000000000027951c99000000000000000000000000000000000000000000000000ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001000400000000000800010000000af30100040000000000000000000000020000002700000000000000000000000000000000000000000000000000000000000000000000000000000077475a5c000000000000000000000000000000000000000000000000ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3331393031383436362f66696c65302f66696c6530000000000000000000000000000000000000000000002247ea9f000000000000000000000000000000000000000000000000ed8100000a000000d2f4655fd2f4655fd2f4655f00000000000001000400000000000800010000000af301000400000000000000000000000100000029000000000000000000000000000000000000000000000000000000000000000000000000000000401f9fd3200000000000000000000000000000000000000000000000ed81000028230000d2f4655fd2f4655fd2f4655f00000000000002001200000000000800010000000af30100040000000000000000000000090000002a0000000000000000000000000000000000000000000000000000000000000000000000000000001dd000b4000000000000000000000000000000000000000000000000ed81000064000000d2f4655fd2f4655fd2f4655f00000000000001000200000000000800010000000af3010004000000000000000000000001000000330000000000000000000000000000000000000000000000000000000000000000000000000000006b8b381d00"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x0, @desc1='\x00\x00\x11\x11\"\"33'}) 00:10:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pipefs\x00', 0x1213821, 0x0) fcntl$notify(r0, 0x402, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4000, 0x60, 0x19}, 0x18) [ 641.695780][ T3566] loop0: detected capacity change from 0 to 512 [ 642.717665][ T3566] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:10:41 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xff, 0x602200) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ptmx\x00', 0x2042, 0x0) close_range(r0, r2, 0x0) 00:10:44 executing program 0: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth0_to_batadv\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0xf4, 0x5, 0x3, 0x18, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x78af, 0x8, 0x9}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x9}, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000002800010028bd7000fddbdf2500000000", @ANYRES16=r0, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x24000845}, 0x40081) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x78842, 0x0) pwritev(r1, &(0x7f00000001c0), 0x0, 0x7, 0x101) 00:10:47 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1ff) 00:10:49 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x23, 0x2f, {0x2f, 0x11, "f5e704f6d0f4a47063fcbb154fef88d37a9239bb98b9801f1047d55b4c058d6dea781181b7578c07263f3e544d"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="0003c8000000a4adbe0a237dca4914cc6b60cdbcb37b1871df4558eb89a95c45e4ea986e079194e3d2402e0ccc3daf936a1eca7354122fdeeb4f487c296cb02c3e0864df89dfb4d3b38cc80a5aaea039f9a3674cab4b165638ad3de419a68299f59195a2676939f8002a2412e7fdaee40f08368117535e1f14ee2ee0557d77f3424dbec0fc5064030627813418eb0d307a2cc760b73dfa46ff05000000031d871a032e7d716bb434adc903bf4647dc71fca9c3273f72b602521a0ea512e170dab7144d31a84083bc755b727ee0c2cc79578118b25727de97162db6996244ce3b49b4318144cb901ff24a30555ae6ade1ec47ec42"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7f}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 654.255612][ T3165] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 654.686629][ T3165] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 654.795199][ T3165] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.796759][ T3165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 654.797948][ T3165] usb 1-1: SerialNumber: syz 00:10:54 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1ff) [ 656.991509][ T3165] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 00:11:02 executing program 1: r0 = gettid() r1 = gettid() process_vm_writev(r1, &(0x7f0000002440)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000002900)=[{&(0x7f0000002480)=""/135, 0x87}, {&(0x7f0000002540)=""/221, 0xdd}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tgkill(r2, r2, 0x22) r3 = gettid() r4 = pidfd_open(r3, 0x0) preadv(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000340)=""/65, 0x41}], 0x4, 0x5, 0x7f) tgkill(r1, r2, 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) tgkill(r5, 0xffffffffffffffff, 0x25) process_vm_writev(r0, &(0x7f0000002440), 0x0, &(0x7f0000002900), 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000080)={&(0x7f0000001440)=""/4096, 0x1000}) [ 669.027570][ T19] usb 1-1: USB disconnect, device number 2 [ 669.341501][ T19] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device 00:11:08 executing program 0: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x5) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000200)=0x8) ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x300, 0x0, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @loopback, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x10a}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8a}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb964}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x959a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x65, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x2}}}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8907}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0x300}, 0x1, 0x0, 0x0, 0xc880}, 0x8000) 00:11:09 executing program 1: r0 = gettid() r1 = gettid() process_vm_writev(r1, &(0x7f0000002440)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000002900)=[{&(0x7f0000002480)=""/135, 0x87}, {&(0x7f0000002540)=""/221, 0xdd}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tgkill(r2, r2, 0x22) r3 = gettid() r4 = pidfd_open(r3, 0x0) preadv(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000340)=""/65, 0x41}], 0x4, 0x5, 0x7f) tgkill(r1, r2, 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) tgkill(r5, 0xffffffffffffffff, 0x25) process_vm_writev(r0, &(0x7f0000002440), 0x0, &(0x7f0000002900), 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000080)={&(0x7f0000001440)=""/4096, 0x1000}) 00:11:13 executing program 0: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x5) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000200)=0x8) ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x300, 0x0, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @loopback, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x10a}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8a}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb964}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x959a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x65, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x2}}}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8907}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0x300}, 0x1, 0x0, 0x0, 0xc880}, 0x8000) 00:11:14 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) listen(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r1, &(0x7f0000000140)=""/165, 0xa5, 0x140, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x10001, @mcast2, 0x81}}, 0x80) 00:11:19 executing program 0: munlockall() munlockall() 00:11:20 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x100, 0x800, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r4 = getuid() r5 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}], [{@subj_user={'subj_user', 0x3d, '\'#@'}}, {@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, 'rootmode'}}, {@appraise='appraise'}, {@euid_gt={'euid>', r4}}]}}) [ 686.148612][ T3641] fuseblk: Unknown parameter 'subj_user' 00:11:25 executing program 0: munlockall() munlockall() [ 688.408958][ T3645] fuseblk: Unknown parameter 'subj_user' 00:11:29 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040)={0x1f16c0, 0x24, 0x1}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101000, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x0, 0x0) read(r2, &(0x7f00000009c0)=""/234, 0xea) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="30d9b4417dae86dc00000000000000000000000858332992c0d7fbf5c436cc9fc2c7c06e7917a6e30bea30206a254e8e28e8b550f55562b7f021d7315b51ee43c2b4fcf3bfa7c74cd5f8e198d1712adee3cfd453cf0db11e1260354034e5335c8b213c39fb0ab2ca3b7ef97460f1b3459d0954e66e6c056257dbbff60d3c805f1e952d1cc4331fe44ad998d77b851282e1bd808473"], 0x5}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000480)={{r2}, "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"}) 00:11:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read$FUSE(r0, &(0x7f0000003d80)={0x2020, 0x0, 0x0}, 0x2020) read(r0, &(0x7f0000000000)=""/52, 0x34) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x21, 0x7ff, 0x400040, 0x0, 0xccf, 0x4, 0x4}}, 0x50) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xc8601, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1012014}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xec44}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 00:11:34 executing program 1: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008840}, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000005fc0)) 00:11:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read$FUSE(r0, &(0x7f0000003d80)={0x2020, 0x0, 0x0}, 0x2020) read(r0, &(0x7f0000000000)=""/52, 0x34) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x21, 0x7ff, 0x400040, 0x0, 0xccf, 0x4, 0x4}}, 0x50) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xc8601, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1012014}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xec44}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 00:11:38 executing program 1: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008840}, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000005fc0)) 00:11:39 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @remote}}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) [ 702.756205][ T3669] Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000020000040 [ 702.789131][ T3669] Oops [#1] [ 702.790263][ T3669] Modules linked in: [ 702.791295][ T3669] CPU: 1 PID: 3669 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00715-ga5e13c6df0e4 #0 [ 702.793824][ T3669] Hardware name: riscv-virtio,qemu (DT) [ 702.795027][ T3669] epc : sock_ioctl+0x4c4/0x66c [ 702.796406][ T3669] ra : sock_ioctl+0x4c4/0x66c [ 702.797547][ T3669] epc : ffffffe0020e60a2 ra : ffffffe0020e60a2 sp : ffffffe0099dbda0 [ 702.799203][ T3669] gp : ffffffe004588b08 tp : ffffffe0093f17c0 t0 : 0000000000000000 [ 702.800497][ T3669] t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe0099dbe30 [ 702.802152][ T3669] s1 : 0000000000040000 a0 : 0000000000000000 a1 : 0000000000000007 [ 702.803352][ T3669] a2 : 1ffffffc0127e2f8 a3 : ffffffe002a94d2e a4 : 0000000000000000 [ 702.804496][ T3669] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000084f3a [ 702.807685][ T3669] s2 : 0000000000000000 s3 : 0000000000008902 s4 : 0000000020000040 [ 702.809197][ T3669] s5 : ffffffe00458c0d0 s6 : ffffffe00ce3ef40 s7 : ffffffe0062b8000 [ 702.811123][ T3669] s8 : 0000000000008904 s9 : ffffffe00ce3f000 s10: 0000000000000000 [ 702.812961][ T3669] s11: 0000000000020000 t3 : eda64e4c63052d00 t4 : ffffffc4039f6fb2 [ 702.814153][ T3669] t5 : ffffffc4039f6fba t6 : 0000000000040000 [ 702.815100][ T3669] status: 0000000000000120 badaddr: 0000000020000040 cause: 000000000000000f [ 702.816421][ T3669] Call Trace: [ 702.817215][ T3669] [] sock_ioctl+0x4c4/0x66c [ 702.820873][ T3669] [] sys_ioctl+0x5c2/0xd56 [ 702.822766][ T3669] [] ret_from_syscall+0x0/0x2 [ 702.903341][ T3669] ---[ end trace fe4e9169089c2bf5 ]--- [ 702.905010][ T3669] Kernel panic - not syncing: Fatal exception [ 702.906610][ T3669] SMP: stopping secondary CPUs [ 702.908729][ T3669] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:18:33 Registers: info registers vcpu 0 pc ffffffe0000cfb8e mhartid 0000000000000000 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc ffffffe000034928 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe0001d13a2 x2/sp ffffffe0074b39e0 x3/gp ffffffe004588b08 x4/tp ffffffe007655f00 x5/t0 ffffffc400d4dae5 x6/t1 0000000000000001 x7/t2 ffffffffd7b30176 x8/s0 ffffffe0074b3980 x9/s1 ffffffe0076568d0 x10/a0 ffffffe004cee050 x11/a1 ffffffe007656920 x12/a2 1ffffffc0099dcb2 x13/a3 ffffffe0000cef4c x14/a4 0000000000000000 x15/a5 0000000000000004 x16/a6 0000000000f00000 x17/a7 eda64e4c63052d00 x18/s2 ffffffe007655f00 x19/s3 ffffffe0003be5ee x20/s4 ffffffe006a6d640 x21/s5 ffffffe0020ff9b0 x22/s6 ffffffe006fec000 x23/s7 0000000000000000 x24/s8 ffffffe006a6d710 x25/s9 ffffffe00579be00 x26/s10 0000000000000000 x27/s11 ffffffe006a6d708 x28/t3 eda64e4c63052d00 x29/t4 ffffffc400e96767 x30/t5 ffffffc400e9676f x31/t6 ffffffe00623a026 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe000999316 mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc ffffffe0000dd9c0 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe0001d14d2 x2/sp ffffffe01cfb7c00 x3/gp ffffffe004588b08 x4/tp ffffffe0082e97c0 x5/t0 0000000000000000 x6/t1 0000000000000001 x7/t2 0000000000000000 x8/s0 ffffffe01cfb7c00 x9/s1 ffffffe00363a078 x10/a0 0000000000000020 x11/a1 0000000000000003 x12/a2 0000000000000000 x13/a3 ffffffe000999334 x14/a4 0000000000000000 x15/a5 ffffffe0082e97c0 x16/a6 0000000000f00000 x17/a7 ffffffe00099af52 x18/s2 ffffffe00ab7db60 x19/s3 ffffffe005145d50 x20/s4 ffffffe0030045c0 x21/s5 ffffffe005145d58 x22/s6 0000000000000000 x23/s7 ffffffe003004930 x24/s8 ffffffe003004960 x25/s9 0000003fffb6a4b0 x26/s10 00000000000001f4 x27/s11 000000000000000e x28/t3 eda64e4c63052d00 x29/t4 ffffffc40133b719 x30/t5 ffffffc40133b71b x31/t6 ffffffe0099db8d8 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000