000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:07 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:09:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:07 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 17:09:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 17:09:07 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000340)) 17:09:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000005bc019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x19, &(0x7f0000000000)={0x6}, 0x4) 17:09:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8917, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1367.109790][T15203] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.125081][T15203] binder: 15201:15203 ioctl 40046207 0 returned -16 [ 1367.138160][T15208] loop1: detected capacity change from 0 to 264192 17:09:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x3, 0x1f, 0x2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) [ 1367.165952][T15211] binder: 15201:15211 ioctl c0306201 20001480 returned -14 [ 1367.191378][T15208] EXT4-fs (loop1): bad geometry: block count 3227189248 exceeds size of device (132096 blocks) 17:09:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newnexthop={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@NHA_GROUP={0xc, 0x2, [{}]}]}, 0x24}}, 0x0) [ 1367.365991][T15221] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.403853][T15221] binder: 15218:15221 ioctl 40046207 0 returned -16 [ 1367.417054][T15223] binder: 15218:15223 ioctl c0306201 20001480 returned -14 17:09:07 executing program 3: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8917, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:07 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000240)) 17:09:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891f, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000005cc019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, 0x0) 17:09:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8917, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8992, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1367.661888][T15233] loop1: detected capacity change from 0 to 264192 [ 1367.675515][T15229] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.692186][T15233] EXT4-fs (loop1): bad geometry: block count 3227254784 exceeds size of device (132096 blocks) 17:09:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec000000310001002abd7000fcdbdf2500000000680001000c001b0008000300018000000c001f0008000300e30200000c00010008000300ff0f000010000b000b00010073616d706c6500000c00010008000300410f000010001b000b0001006d69527265640000140010000f00010074756e6e656c5f6b65790000680001000c00170008000300010001000c000400080003000300000010001b000b0001006d697272656400000c000a000800010069707400100005000c000100736b6265646974000c000100080001006970740014000a000d000100636f6e6e6d61726b000000000400010004"], 0xec}}, 0x0) 17:09:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1367.725566][T15229] binder: 15225:15229 ioctl 40046207 0 returned -16 [ 1367.747602][T15238] binder: 15225:15238 ioctl c0306201 20001480 returned -14 17:09:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8917, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1367.882272][T15248] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.892970][T15248] binder: 15247:15248 ioctl 40046207 0 returned -16 [ 1367.901911][T15248] binder: 15247:15248 ioctl c0306201 20001480 returned -14 17:09:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000005dc019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89b1, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:08 executing program 2: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) 17:09:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x9, 0x3, 0x1f, 0x0, 0x1}, 0x48) 17:09:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8991, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20}, {}]}) [ 1368.283372][T15254] binder: BINDER_SET_CONTEXT_MGR already set [ 1368.307126][T15256] loop1: detected capacity change from 0 to 264192 [ 1368.316020][T15254] binder: 15253:15254 ioctl 40046207 0 returned -16 17:09:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) [ 1368.333280][T15254] binder: 15253:15254 ioctl c0306201 20001480 returned -14 17:09:08 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x200000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000003c0)=r0) 17:09:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000680)=[{0x2, 0x0, 0x0, 0x42e}]}) [ 1368.374009][T15256] EXT4-fs (loop1): bad geometry: block count 3227320320 exceeds size of device (132096 blocks) [ 1368.456575][T15271] binder: BINDER_SET_CONTEXT_MGR already set [ 1368.469453][T15271] binder: 15270:15271 ioctl 40046207 0 returned -16 [ 1368.492436][T15271] binder: 15270:15271 ioctl c0306201 20001480 returned -14 [ 1368.569460][ T1480] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1368.799457][ T1480] usb 4-1: device descriptor read/64, error 18 [ 1369.079273][ T1480] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1369.269283][ T1480] usb 4-1: device descriptor read/64, error 18 [ 1369.399605][ T1480] usb usb4-port1: attempt power cycle [ 1369.839257][ T1480] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1370.019544][ T1480] usb 4-1: device descriptor read/8, error -61 [ 1370.289273][ T1480] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1370.459355][ T1480] usb 4-1: device descriptor read/8, error -61 [ 1370.588967][ T1480] usb usb4-port1: unable to enumerate USB device 17:09:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@delqdisc={0x38, 0x25, 0x15, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) 17:09:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 17:09:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000005ec019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8924, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 17:09:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, 0x0) 17:09:11 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x40000, 0x0) 17:09:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec000000310001002abd7000fcdbdf2500000000680001000c001b0008000300018000000c001f0008000300e30200000c0001"], 0xec}}, 0x0) 17:09:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1371.294367][T15285] loop1: detected capacity change from 0 to 264192 [ 1371.300177][T15281] binder: 15279:15281 ioctl c0306201 20001480 returned -14 [ 1371.333018][T15285] EXT4-fs (loop1): bad geometry: block count 3227385856 exceeds size of device (132096 blocks) 17:09:11 executing program 4: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080), 0xfffffffffffffdfd) 17:09:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000005fc019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1371.397469][T15292] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1371.420116][T15292] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1371.449094][T15294] binder: 15293:15294 ioctl c0306201 20001480 returned -14 [ 1371.454543][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1371.519440][T15299] loop1: detected capacity change from 0 to 264192 [ 1371.547310][T15299] EXT4-fs (loop1): bad geometry: block count 3227451392 exceeds size of device (132096 blocks) [ 1371.709338][ T2929] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1371.899296][ T2929] usb 4-1: device descriptor read/64, error 18 [ 1372.179635][ T2929] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1372.379353][ T2929] usb 4-1: device descriptor read/64, error 18 [ 1372.502187][ T2929] usb usb4-port1: attempt power cycle [ 1372.919372][ T2929] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1373.109358][ T2929] usb 4-1: device descriptor read/8, error -61 [ 1373.389331][ T2929] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1373.559509][ T2929] usb 4-1: device descriptor read/8, error -61 [ 1373.679861][ T2929] usb usb4-port1: unable to enumerate USB device 17:09:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000), 0x4) 17:09:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000060c019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8952, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:14 executing program 0: timer_create(0x3, 0x0, &(0x7f0000001440)) timer_settime(0x0, 0x0, &(0x7f0000001500)={{}, {0x0, 0x989680}}, 0x0) 17:09:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894a, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:14 executing program 4: syz_mount_image$f2fs(0x0, 0x0, 0x7, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="b0", 0x1}], 0x0, 0x0) 17:09:14 executing program 2: socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) [ 1374.343948][T15307] loop1: detected capacity change from 0 to 264192 [ 1374.376759][T15304] binder: 15301:15304 ioctl c0306201 20001480 returned -14 17:09:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 17:09:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8994, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:14 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x3bf803, 0x0) [ 1374.440828][T15307] EXT4-fs (loop1): bad geometry: block count 3227516928 exceeds size of device (132096 blocks) [ 1374.518512][T15319] binder: 15318:15319 ioctl c0306201 20001480 returned -14 [ 1374.789411][ T3676] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1374.981525][ T3676] usb 4-1: device descriptor read/64, error 18 [ 1375.249276][ T3676] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1375.469364][ T3676] usb 4-1: device descriptor read/64, error 18 [ 1375.589457][ T3676] usb usb4-port1: attempt power cycle [ 1376.019315][ T3676] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1376.199459][ T3676] usb 4-1: device descriptor read/8, error -61 [ 1376.479313][ T3676] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1376.679484][ T3676] usb 4-1: device descriptor read/8, error -61 [ 1376.800134][ T3676] usb usb4-port1: unable to enumerate USB device 17:09:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000061c019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:17 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 17:09:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0xb, 0x0, 0x0, 0x8}, 0x48) 17:09:17 executing program 0: timer_create(0x82c67d524333cb88, 0x0, 0x0) 17:09:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8912, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x10, &(0x7f0000000000)={0x6}, 0x4) 17:09:17 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000004c0)={0xa}, 0xf, &(0x7f0000000500)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}, 0x1, [{0x0, 0x0}]}) [ 1377.440693][T15333] binder: 15332:15333 ioctl c0306201 20001480 returned -14 [ 1377.441875][T15336] loop1: detected capacity change from 0 to 264192 17:09:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:17 executing program 0: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='rootcont']) [ 1377.516339][T15336] EXT4-fs (loop1): bad geometry: block count 3227582464 exceeds size of device (132096 blocks) 17:09:17 executing program 4: setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1377.567222][T15346] binder: 15345:15346 ioctl c0306201 20001480 returned -14 [ 1377.819435][ T2929] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1377.859387][ T3680] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1378.049398][ T3680] usb 4-1: device descriptor read/64, error 18 [ 1378.089314][ T2929] usb 3-1: Using ep0 maxpacket: 32 [ 1378.219429][ T2929] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1378.319372][ T3680] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1378.480164][ T2929] usb 3-1: string descriptor 0 read error: -22 [ 1378.486455][ T2929] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1378.495802][ T2929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.509349][ T3680] usb 4-1: device descriptor read/64, error 18 [ 1378.552639][ T2929] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1378.629933][ T3680] usb usb4-port1: attempt power cycle [ 1378.756072][ T3676] usb 3-1: USB disconnect, device number 26 [ 1379.039338][ T3680] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1379.229482][ T3680] usb 4-1: device descriptor read/8, error -61 [ 1379.499370][ T3680] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1379.689563][ T3680] usb 4-1: device descriptor read/8, error -61 [ 1379.809781][ T3680] usb usb4-port1: unable to enumerate USB device 17:09:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000fffffffe19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@delqdisc={0x58, 0x25, 0x15, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 17:09:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{}, {0x1}]}]}, 0x2c}}, 0x0) 17:09:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x0, 0x0, 0x1f, 0x0, 0x1}, 0x48) 17:09:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891a, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8914, &(0x7f0000000200)={'syztnl0\x00', 0x0}) [ 1380.505675][T15357] loop1: detected capacity change from 0 to 264192 17:09:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4b49, 0x0) 17:09:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1380.566556][T15357] EXT4-fs (loop1): bad geometry: block count 4278190079 exceeds size of device (132096 blocks) 17:09:20 executing program 2: io_setup(0x3, &(0x7f0000001080)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 17:09:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8991, &(0x7f0000000200)={'tunl0\x00', 0x0}) [ 1380.680329][T15371] binder: BINDER_SET_CONTEXT_MGR already set [ 1380.722782][T15371] binder: 15369:15371 ioctl 40046207 0 returned -16 [ 1381.079252][ T3676] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1381.293333][ T3676] usb 4-1: device descriptor read/64, error 18 [ 1381.569377][ T3676] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1381.769312][ T3676] usb 4-1: device descriptor read/64, error 18 [ 1381.899421][ T3676] usb usb4-port1: attempt power cycle [ 1382.319322][ T3676] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1382.499734][ T3676] usb 4-1: device descriptor read/8, error -61 [ 1382.779315][ T3676] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1382.979554][ T3676] usb 4-1: device descriptor read/8, error -61 [ 1383.099923][ T3676] usb usb4-port1: unable to enumerate USB device 17:09:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000feffffff19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x3, 0xffffffe, 0x0, 0x1}, 0x48) 17:09:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8995, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891b, 0x0) 17:09:23 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x50102, 0x0) 17:09:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) [ 1383.600531][T15384] loop1: detected capacity change from 0 to 264192 17:09:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 17:09:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1383.654571][T15384] EXT4-fs (loop1): bad geometry: block count 4294967294 exceeds size of device (132096 blocks) 17:09:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0xb}, 0x48) 17:09:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newnexthop={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@NHA_GROUP={0xc, 0x2, [{}]}]}, 0x24}}, 0x0) [ 1383.745185][T15397] binder: 15395:15397 ioctl c0306201 0 returned -14 [ 1384.029303][ T22] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1384.219319][ T22] usb 4-1: device descriptor read/64, error 18 [ 1384.489357][ T22] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1384.709373][ T22] usb 4-1: device descriptor read/64, error 18 [ 1384.840034][ T22] usb usb4-port1: attempt power cycle [ 1385.249308][ T22] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1385.419454][ T22] usb 4-1: device descriptor read/8, error -61 [ 1385.689309][ T22] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1385.879663][ T22] usb 4-1: device descriptor read/8, error -61 [ 1386.009871][ T22] usb usb4-port1: unable to enumerate USB device 17:09:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000003000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 17:09:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:26 executing program 2: syz_mount_image$f2fs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 17:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) 17:09:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89a3, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000100)=@raw=[@map_fd], &(0x7f0000000180)='syzkaller\x00', 0x80, 0xc7, &(0x7f00000001c0)=""/199, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1386.660736][T15411] loop1: detected capacity change from 0 to 264192 [ 1386.682942][T15409] binder: 15406:15409 ioctl c0306201 0 returned -14 17:09:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1386.729705][T15411] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:27 executing program 4: timer_create(0x3, &(0x7f0000002c80)={0x0, 0x3a, 0x2}, &(0x7f0000002cc0)) 17:09:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{}, {0x3}]}) [ 1386.774717][T15411] EXT4-fs (loop1): get root inode failed [ 1386.808470][T15411] EXT4-fs (loop1): mount failed [ 1386.862248][T15422] binder: BINDER_SET_CONTEXT_MGR already set [ 1386.875521][T15422] binder: 15419:15422 ioctl 40046207 0 returned -16 [ 1386.891439][T15422] binder: 15419:15422 ioctl c0306201 0 returned -14 [ 1387.099288][ T3676] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1387.349310][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1387.389479][ T3676] usb 4-1: no configurations [ 1387.394190][ T3676] usb 4-1: can't read configurations, error -22 [ 1387.549298][ T3676] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1387.809490][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1387.859560][ T3676] usb 4-1: no configurations [ 1387.864270][ T3676] usb 4-1: can't read configurations, error -22 [ 1387.871252][ T3676] usb usb4-port1: attempt power cycle [ 1388.289302][ T3676] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1388.379462][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1388.439542][ T3676] usb 4-1: no configurations [ 1388.444192][ T3676] usb 4-1: can't read configurations, error -22 [ 1388.599277][ T3676] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1388.700860][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1388.739650][ T3676] usb 4-1: no configurations [ 1388.744305][ T3676] usb 4-1: can't read configurations, error -22 [ 1388.751401][ T3676] usb usb4-port1: unable to enumerate USB device 17:09:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) 17:09:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec000000310001002abd7000fcdbdf2500000000680001"], 0xec}}, 0x0) 17:09:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000004000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{}, {0x1, 0x0, 0x2}]}]}, 0x2c}}, 0x0) 17:09:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:29 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmstat\x00', 0x0, 0x0) 17:09:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='rootcontex']) 17:09:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) 17:09:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1389.739350][T15430] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1389.743130][T15435] loop1: detected capacity change from 0 to 264192 [ 1389.748937][T15430] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. 17:09:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x40802) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18}, 0x18) [ 1389.813202][T15435] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1389.860012][T15435] EXT4-fs (loop1): get root inode failed [ 1389.865758][T15435] EXT4-fs (loop1): mount failed [ 1390.119289][T31331] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1390.359402][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1390.399553][T31331] usb 4-1: no configurations [ 1390.406504][T31331] usb 4-1: can't read configurations, error -22 [ 1390.559325][T31331] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1390.799284][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1390.839514][T31331] usb 4-1: no configurations [ 1390.844141][T31331] usb 4-1: can't read configurations, error -22 [ 1390.854938][T31331] usb usb4-port1: attempt power cycle [ 1391.269301][T31331] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1391.359490][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1391.399452][T31331] usb 4-1: no configurations [ 1391.404287][T31331] usb 4-1: can't read configurations, error -22 [ 1391.559306][T31331] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1391.649657][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1391.689538][T31331] usb 4-1: no configurations [ 1391.694188][T31331] usb 4-1: can't read configurations, error -22 [ 1391.701013][T31331] usb usb4-port1: unable to enumerate USB device 17:09:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8929, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8920, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000005000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz0\x00', 0x200002, 0x0) 17:09:33 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80012041, 0x0) 17:09:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='rootconte']) [ 1392.827925][T15457] loop1: detected capacity change from 0 to 264192 17:09:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x0, 0x0, 0x0, 0x180, 0x1}, 0x48) 17:09:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1392.911184][T15457] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:33 executing program 0: socket$bt_rfcomm(0x2, 0x2, 0x3a) 17:09:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891e, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1392.975429][T15457] EXT4-fs (loop1): get root inode failed [ 1392.982004][T15457] EXT4-fs (loop1): mount failed [ 1393.279314][ T3676] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1393.531333][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1393.569547][ T3676] usb 4-1: no configurations [ 1393.574221][ T3676] usb 4-1: can't read configurations, error -22 [ 1393.729323][ T3676] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1393.989284][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1394.029478][ T3676] usb 4-1: no configurations [ 1394.034135][ T3676] usb 4-1: can't read configurations, error -22 [ 1394.040909][ T3676] usb usb4-port1: attempt power cycle [ 1394.459286][ T3676] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1394.569379][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1394.609605][ T3676] usb 4-1: no configurations [ 1394.614309][ T3676] usb 4-1: can't read configurations, error -22 [ 1394.770529][ T3676] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1394.879598][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1394.924031][ T3676] usb 4-1: no configurations [ 1394.928675][ T3676] usb 4-1: can't read configurations, error -22 [ 1394.935299][ T3676] usb usb4-port1: unable to enumerate USB device 17:09:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:36 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 17:09:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000007000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:36 executing program 4: socketpair(0x10, 0x0, 0x7, &(0x7f0000000000)) 17:09:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x1, 0xffffffff, 0x0, 0x1}, 0x48) 17:09:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x40802) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 1395.893656][T15483] loop1: detected capacity change from 0 to 264192 17:09:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:36 executing program 2: bpf$MAP_CREATE(0xd, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:09:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x5, &(0x7f0000000000)={0x6}, 0x4) [ 1395.987742][T15483] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1396.051222][T15483] EXT4-fs (loop1): get root inode failed [ 1396.060639][T15483] EXT4-fs (loop1): mount failed [ 1396.177975][T15503] binder: 15502:15503 ioctl c0306201 20001480 returned -14 [ 1396.210230][T15503] binder_alloc: 15502: binder_alloc_buf, no vma [ 1396.389262][ T22] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1396.649265][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1396.779370][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.789539][ T22] usb 4-1: config 0 has no interfaces? [ 1396.795055][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1396.804957][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.815136][ T22] usb 4-1: config 0 descriptor?? 17:09:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8914, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:39 executing program 4: setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="b08905b1d95d41ac12fe1c57ddf6b06f14624f7962db7678b1e944048aaeecd241a8c8013907c2868f960f1a92b3fcef68aaa182a06f822257335668ecd8aaa14c583bbc4ae4089d907eeb6d17605d6c97ca712751a3766281feede5beb3e522c34fd1cf7ca0805f0526a4f41732b4091f4cc75083bcee69b2c409f6cde03c6375451af5ca560af9a3c9860da10f67c804bcd03d63045ea70626e30289959cb6f18605f608d2b3d5ec118b4367f25654c0b199bfe3fb0e2d02bba093a815179a0009d0a720ec9b62c647f9b5d6b5df6ce991423b294094c28fb5216418c10c052b970949d668c0983e", 0xe9}], 0x110800, &(0x7f0000000300)=ANY=[@ANYBLOB="726f6f74636f6e746578743d73746166665f747970654e697a6173696728000000000000000000000000b12af266035cd44332a11e570f98781c17a0ba9488ce2f5465afc2556270b30f03b79c78b6b1841db001"]) 17:09:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000008000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:39 executing program 0: syz_mount_image$f2fs(0x0, 0x0, 0x7, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="b08905b1d95d41ac", 0x8}], 0x0, 0x0) [ 1398.950791][ T1480] usb 4-1: USB disconnect, device number 95 17:09:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1398.995128][T15513] binder: 15511:15513 ioctl c0306201 20001480 returned -14 [ 1399.004742][T15516] loop1: detected capacity change from 0 to 264192 [ 1399.032380][T15513] binder_alloc: 15511: binder_alloc_buf, no vma 17:09:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4009, 0x3, 0x1f, 0x0, 0x1}, 0x48) [ 1399.064694][T15516] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1399.097678][T15516] EXT4-fs (loop1): get root inode failed [ 1399.109834][T15516] EXT4-fs (loop1): mount failed 17:09:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, 0x0) 17:09:39 executing program 0: getresuid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f0000002480)) [ 1399.142896][T15521] binder: 15520:15521 ioctl c0306201 20001480 returned -14 [ 1399.187058][T15521] binder_alloc: 15520: binder_alloc_buf, no vma [ 1399.419298][ T1480] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1399.708366][ T1480] usb 4-1: Using ep0 maxpacket: 16 [ 1399.849482][ T1480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.864925][ T1480] usb 4-1: config 0 has no interfaces? [ 1399.870567][ T1480] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1399.883708][ T1480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.893372][ T1480] usb 4-1: config 0 descriptor?? 17:09:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:09:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000009000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:42 executing program 2: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='\x00'}, 0x10) 17:09:42 executing program 0: bpf$MAP_CREATE(0x10, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:09:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000), 0x4) 17:09:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) [ 1402.025758][ T5226] usb 4-1: USB disconnect, device number 96 [ 1402.053408][T15543] loop1: detected capacity change from 0 to 264192 17:09:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8932, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) [ 1402.091816][T15546] binder: 15539:15546 ioctl c0306201 20001480 returned -14 [ 1402.108161][T15543] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:09:42 executing program 4: socketpair(0xa, 0x3, 0xff, &(0x7f00000007c0)) [ 1402.169367][T15543] EXT4-fs (loop1): get root inode failed [ 1402.175277][T15543] EXT4-fs (loop1): mount failed [ 1402.283842][T15560] binder: 15558:15560 ioctl c0306201 20001480 returned -14 [ 1402.479504][ T5226] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1402.719370][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 1402.840540][ T5226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.850971][ T5226] usb 4-1: config 0 has no interfaces? [ 1402.856573][ T5226] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1402.865833][ T5226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.879836][ T5226] usb 4-1: config 0 descriptor?? 17:09:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x3e, &(0x7f0000000000), 0x4) 17:09:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000a000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x3, 0x1f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 17:09:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8931, &(0x7f0000000200)={'tunl0\x00', 0x0}) 17:09:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1405.119750][ T1480] usb 4-1: USB disconnect, device number 97 [ 1405.157300][T15574] binder: 15573:15574 ioctl c0306201 20001480 returned -14 17:09:45 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 17:09:45 executing program 2: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='rootcontext']) [ 1405.165948][T15575] loop1: detected capacity change from 0 to 264192 17:09:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x3, 0x1f, 0x2, 0x1}, 0x48) 17:09:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 17:09:45 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/slabinfo\x00', 0x0, 0x0) [ 1405.253581][T15575] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:45 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) [ 1405.301250][T15575] EXT4-fs (loop1): get root inode failed [ 1405.311891][T15575] EXT4-fs (loop1): mount failed [ 1405.334188][T15589] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.349998][T15589] binder: 15586:15589 ioctl 40046207 0 returned -16 [ 1405.363168][T15589] binder: 15586:15589 ioctl c0306201 20001480 returned -14 [ 1405.380451][ T27] audit: type=1326 audit(1656176985.584:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f129ca89109 code=0x0 [ 1405.381465][T15589] binder: 15586:15589 ioctl c0306201 0 returned -14 [ 1405.519589][T31331] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1405.629450][ T1480] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1405.879425][ T1480] usb 4-1: Using ep0 maxpacket: 16 [ 1405.899862][T31331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1405.910987][T31331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.921519][T31331] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1405.999535][ T1480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.009778][ T1480] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1406.018761][ T1480] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1406.028119][ T1480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.038259][ T1480] usb 4-1: config 0 descriptor?? [ 1406.089498][T31331] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1406.098754][T31331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.106887][T31331] usb 1-1: Product: syz [ 1406.111197][T31331] usb 1-1: Manufacturer: syz [ 1406.115808][T31331] usb 1-1: SerialNumber: syz [ 1406.419661][T31331] usbhid 1-1:1.0: can't add hid device: -22 [ 1406.425754][T31331] usbhid: probe of 1-1:1.0 failed with error -22 [ 1406.434848][T31331] usb 1-1: USB disconnect, device number 23 17:09:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:48 executing program 2: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_gettime(0x0, &(0x7f0000000400)) 17:09:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000e000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 17:09:48 executing program 4: setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="b08905b1d95d41ac12fe1c57ddf6b06f14624f7962db7678b1e944048aaeecd241a8c8013907c2868f960f1a92b3fcef68aaa182a06f822257335668ecd8aaa14c583bbc4ae4089d907eeb6d17605d6c97ca712751a3766281feede5beb3e522c34fd1cf7ca0805f0526a4f41732b4091f4cc75083bcee69b2c409f6cde03c6375451af5ca560af9a3c9860da10f67c804bcd03d63045ea70626e30289959cb6f18605", 0xa3}], 0x0, 0x0) 17:09:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1408.184360][T31331] usb 4-1: USB disconnect, device number 98 17:09:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 17:09:48 executing program 2: socket(0x28, 0x0, 0x8001) 17:09:48 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) [ 1408.226214][T15604] loop1: detected capacity change from 0 to 264192 [ 1408.238557][T15603] binder: 15598:15603 ioctl c0306201 20001480 returned -14 [ 1408.282230][T15603] binder: 15598:15603 ioctl c0306201 0 returned -14 17:09:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 17:09:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1408.326037][T15604] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) [ 1408.433073][T15604] EXT4-fs (loop1): get root inode failed [ 1408.438999][T15604] EXT4-fs (loop1): mount failed [ 1408.485256][T15621] binder: 15619:15621 ioctl c0306201 20001480 returned -14 [ 1408.498066][T15621] binder: 15619:15621 ioctl c0306201 0 returned -14 [ 1408.669355][T31331] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1408.909396][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1409.029491][T31331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.039963][T31331] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1409.049139][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1409.058251][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.069760][T31331] usb 4-1: config 0 descriptor?? 17:09:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8953, 0x0) 17:09:51 executing program 0: socket$bt_rfcomm(0x10, 0x2, 0x3) 17:09:51 executing program 4: bpf$MAP_CREATE(0x5, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 17:09:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000f000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1411.297232][ T3676] usb 4-1: USB disconnect, device number 99 17:09:51 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x7ef, 0x46081) [ 1411.342452][T15637] loop1: detected capacity change from 0 to 264192 [ 1411.347797][T15636] binder: 15629:15636 ioctl c0306201 20001480 returned -14 17:09:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 17:09:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:51 executing program 0: socket$bt_rfcomm(0xa, 0x2, 0x3) [ 1411.420795][T15637] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:09:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x18}, 0x48) 17:09:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1411.494462][T15637] EXT4-fs (loop1): get root inode failed [ 1411.513360][T15646] binder: 15643:15646 ioctl c0306201 20001480 returned -14 [ 1411.540000][T15637] EXT4-fs (loop1): mount failed [ 1411.608982][T15652] binder: 15650:15652 ioctl c0306201 20001480 returned -14 [ 1411.789395][ T3676] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1412.049276][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1412.187698][ T3676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.197899][ T3676] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1412.207011][ T3676] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1412.216147][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.227447][ T3676] usb 4-1: config 0 descriptor?? 17:09:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 17:09:54 executing program 4: socketpair(0x18, 0x0, 0x50f4184c, &(0x7f00000000c0)) 17:09:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000010000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) 17:09:54 executing program 0: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x996827aafc9886fa) [ 1414.356185][ T3676] usb 4-1: USB disconnect, device number 100 [ 1414.395883][T15667] loop1: detected capacity change from 0 to 264192 17:09:54 executing program 2: open$dir(&(0x7f0000000000)='./file1\x00', 0x4a5c2, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x1000400) 17:09:54 executing program 0: r0 = socket(0x11, 0x80003, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000100)) 17:09:54 executing program 4: r0 = socket(0x11, 0x80003, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, &(0x7f0000000080)) [ 1414.413944][T15668] binder: 15662:15668 ioctl c0306201 20001480 returned -14 17:09:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) 17:09:54 executing program 4: open$dir(&(0x7f0000000040)='./file1\x00', 0xa543, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x101282, 0x17) [ 1414.465277][T15667] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1414.506608][T15667] EXT4-fs (loop1): get root inode failed [ 1414.515069][T15667] EXT4-fs (loop1): mount failed 17:09:54 executing program 0: r0 = socket(0x11, 0x80003, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) [ 1414.600076][T15682] binder: 15680:15682 ioctl c0306201 20001480 returned -14 [ 1414.829511][ T3676] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1415.099255][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1415.239482][ T3676] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1415.248527][ T3676] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1415.258103][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.272336][ T3676] usb 4-1: config 0 descriptor?? 17:09:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:09:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 17:09:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:09:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000014000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:09:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 17:09:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) [ 1417.433187][ T22] usb 4-1: USB disconnect, device number 101 17:09:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000480), 0x84) 17:09:57 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) listen(r0, 0x0) connect(r0, &(0x7f00000006c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:09:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000240), 0x4) [ 1417.494002][T15694] loop1: detected capacity change from 0 to 264192 [ 1417.516676][T15697] binder: BINDER_SET_CONTEXT_MGR already set [ 1417.534417][T15697] binder: 15693:15697 ioctl 40046207 0 returned -16 [ 1417.574355][T15706] binder: 15693:15706 ioctl c0306201 20001480 returned -14 [ 1417.592420][T15710] sctp: [Deprecated]: syz-executor.0 (pid 15710) Use of int in maxseg socket option. [ 1417.592420][T15710] Use struct sctp_assoc_value instead 17:09:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x31) 17:09:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f00000001c0)={0xffffff2a, 0x2}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) 17:09:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 1417.619541][T15694] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1417.706776][T15694] EXT4-fs (loop1): get root inode failed [ 1417.718672][T15694] EXT4-fs (loop1): mount failed [ 1417.758433][T15719] binder: 15718:15719 ioctl c0306201 20001480 returned -14 [ 1417.989331][ T22] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1418.229314][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1418.359502][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1418.368524][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1418.377906][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.387578][ T22] usb 4-1: config 0 descriptor?? 17:10:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 17:10:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) dup2(r0, r1) 17:10:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000026000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:10:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000240)={r2}, &(0x7f00000002c0)=0x8) 17:10:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x78}, 0x0) 17:10:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 1420.544651][ T22] usb 4-1: USB disconnect, device number 102 [ 1420.567693][T15730] loop1: detected capacity change from 0 to 264192 17:10:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x200, 0x0, 0x101}, 0x98) [ 1420.612654][T15733] binder: 15729:15733 ioctl c0306201 20001480 returned -14 [ 1420.648818][T15730] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:10:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x700, 0x718, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 17:10:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1420.667720][T15730] EXT4-fs (loop1): get root inode failed [ 1420.695067][T15730] EXT4-fs (loop1): mount failed [ 1420.700786][T15745] binder: 15741:15745 ioctl c0306201 20001480 returned -14 17:10:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="070002005b"], 0xc) 17:10:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000000c0), 0x8) 17:10:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x0, 0x1, "11"}, 0x9) [ 1420.737381][T15748] binder: 15747:15748 ioctl c0306201 20001480 returned -14 17:10:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000030000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1420.853718][T15757] loop1: detected capacity change from 0 to 264192 [ 1420.859491][T15758] binder: 15754:15758 ioctl c0306201 20001480 returned -14 [ 1420.912954][T15757] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1420.933342][T15757] EXT4-fs (loop1): get root inode failed [ 1420.939122][T15757] EXT4-fs (loop1): mount failed [ 1421.001331][T30518] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1421.077054][ T22] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1421.329306][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1421.449373][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1421.458365][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1421.475857][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.493652][ T22] usb 4-1: config 0 descriptor?? 17:10:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:03 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockname(r0, 0x0, &(0x7f0000000040)) 17:10:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000240), 0x46) 17:10:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@init={0x14}, @sndinfo={0x1c, 0x84, 0x4, {0x401, 0x800}}], 0x30}, 0x0) 17:10:03 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0xdd310000, 0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17:10:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000003d000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockname(r0, 0x0, &(0x7f0000000080)) [ 1423.643807][ T22] usb 4-1: USB disconnect, device number 103 [ 1423.668350][T15769] loop1: detected capacity change from 0 to 264192 17:10:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 1423.713180][T15775] binder: 15765:15775 ioctl c0306201 20001480 returned -14 17:10:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180), &(0x7f00000005c0)=0x8) [ 1423.756235][T15769] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1423.789358][T15769] EXT4-fs (loop1): get root inode failed [ 1423.795270][T15769] EXT4-fs (loop1): mount failed 17:10:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000280), 0x8) 17:10:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@sndinfo={0x1c, 0x84, 0x4, {0x401}}], 0x1c}, 0x0) 17:10:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000046000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1423.970457][T15792] loop1: detected capacity change from 0 to 264192 [ 1423.997538][T15792] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1424.012100][T15792] EXT4-fs (loop1): get root inode failed [ 1424.017886][T15792] EXT4-fs (loop1): mount failed [ 1424.126899][ T22] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1424.369316][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1424.499408][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1424.508652][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.518512][ T22] usb 4-1: config 0 descriptor?? [ 1424.769480][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1425.929437][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1425.938481][ T22] usb 4-1: USB disconnect, device number 104 17:10:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x8) 17:10:06 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) bind$inet6(r1, &(0x7f0000001140)={0x1c, 0x1c, 0x3}, 0x1c) 17:10:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) 17:10:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 17:10:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000063000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 1426.434605][T15801] loop1: detected capacity change from 0 to 264192 17:10:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180), &(0x7f00000005c0)=0x8) 17:10:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0x1c}, 0x0) 17:10:06 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) bind$inet(r1, &(0x7f0000000280)={0x10, 0x2}, 0x10) [ 1426.506145][T15801] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1426.539927][T15801] EXT4-fs (loop1): get root inode failed [ 1426.545810][T15801] EXT4-fs (loop1): mount failed 17:10:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040), 0x10) 17:10:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000100), 0x84) [ 1426.769545][ T3680] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1427.029296][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1427.159606][ T3680] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1427.168693][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.178431][ T3680] usb 4-1: config 0 descriptor?? [ 1427.439510][ T3680] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1427.940540][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.946872][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.591380][ T3680] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1428.601283][ T3680] usb 4-1: USB disconnect, device number 105 17:10:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000fe000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000140), &(0x7f00000002c0)=0x8) 17:10:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x101}, 0x98) 17:10:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) close(r0) 17:10:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) r3 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x13, &(0x7f0000000600)={r2, 0x0, 0x1, '['}, 0x9) 17:10:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000200)={r2}, &(0x7f00000000c0)=0xb0) 17:10:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x196}, 0x98) 17:10:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={r3}, 0x14) [ 1429.108856][T15834] loop1: detected capacity change from 0 to 264192 17:10:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f00000002c0), 0x8) 17:10:09 executing program 5: munlock(&(0x7f0000000000/0x2000)=nil, 0x2000) [ 1429.206609][T15834] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:10:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x196}, 0x98) [ 1429.323363][T15834] EXT4-fs (loop1): get root inode failed [ 1429.329053][T15834] EXT4-fs (loop1): mount failed [ 1429.449540][T31331] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1429.700533][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1429.839491][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1429.852029][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.868845][T31331] usb 4-1: config 0 descriptor?? [ 1430.129529][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1431.289590][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1431.298686][T31331] usb 4-1: USB disconnect, device number 106 17:10:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000084000000020000004a04f7ff003500006a000000060000007f00000001000000d2000000", @ANYRES32=0x0, @ANYBLOB="1c0000008400000004000000f7ff00200800000000000000", @ANYRES32=0x0, @ANYBLOB="100000008400000009000000ac1400bb1c0000008400000004000000860020000500000001250000", @ANYRES32=0x0, @ANYBLOB="1c"], 0x90}, 0x0) 17:10:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) connect$inet(r1, &(0x7f0000000300)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)=0x8) 17:10:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000280)={0x0, 0x8}, 0x8) 17:10:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f0000002540)='~', 0x1, 0x188, &(0x7f00000025c0)=@in={0x10, 0x2}, 0x10) 17:10:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000fc030019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:12 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000480)={&(0x7f0000000200)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}], 0x1c}, 0x0) 17:10:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) dup2(r0, r1) 17:10:12 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6}, 0x14) [ 1431.810488][T15855] loop1: detected capacity change from 0 to 264192 17:10:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/113, 0x71}, 0x0) [ 1431.871335][T15855] EXT4-fs (loop1): bad geometry: block count 261120 exceeds size of device (132096 blocks) 17:10:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000004c0), &(0x7f0000000580)=0x84) 17:10:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000fffe0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1432.016747][T15876] loop1: detected capacity change from 0 to 264192 [ 1432.062864][T15876] EXT4-fs (loop1): bad geometry: block count 16711424 exceeds size of device (132096 blocks) [ 1432.089391][T31331] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1432.339350][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1432.459586][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1432.469058][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.480779][T31331] usb 4-1: config 0 descriptor?? [ 1432.739737][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1433.899517][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1433.919667][T31331] usb 4-1: USB disconnect, device number 107 17:10:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:14 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f00000006c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:10:14 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001300)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x80) 17:10:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0x14}, 0x0) 17:10:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@prinfo={0x14}], 0x14}, 0x0) 17:10:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000feff0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:14 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x12, &(0x7f0000000200), 0x1) 17:10:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x14) [ 1434.392022][T15884] loop1: detected capacity change from 0 to 264192 [ 1434.422483][T15884] EXT4-fs (loop1): bad geometry: block count 16776704 exceeds size of device (132096 blocks) 17:10:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002020019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000100), 0x4) 17:10:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f00000001c0), &(0x7f0000000140)=0x8) 17:10:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000600), 0x8) [ 1434.624731][T15901] loop1: detected capacity change from 0 to 264192 [ 1434.721367][T15901] EXT4-fs (loop1): inodes count not valid: 32 vs 64 [ 1434.732591][T31331] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1434.989363][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1435.109384][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1435.118717][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.135221][T31331] usb 4-1: config 0 descriptor?? [ 1435.399516][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1436.569695][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1436.585607][T31331] usb 4-1: USB disconnect, device number 108 17:10:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 17:10:17 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000540)={r4}, 0x14) 17:10:17 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) sendto(r0, 0x0, 0x0, 0x180, 0x0, 0x0) 17:10:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080)=ANY=[], 0xc) 17:10:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002030019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 17:10:17 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x8) [ 1437.095409][T15917] loop1: detected capacity change from 0 to 264192 [ 1437.145763][T15917] EXT4-fs (loop1): bad geometry: block count 197120 exceeds size of device (132096 blocks) 17:10:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0xfffffffd}, 0x98) 17:10:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="ecfb", 0x2}, {&(0x7f0000000180)="364ee8a906c205706d0a71c1bfeb6ab4732394751b6642c33e853e89707543d13d3e7d109405771f908f65372ab9022ff69ef055b285a48f9e01bb6e", 0x3c}, {&(0x7f0000000440)="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", 0x56f}], 0x3}, 0x0) 17:10:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002040019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc20a}, 0x14) [ 1437.368605][T15937] loop1: detected capacity change from 0 to 264192 [ 1437.379419][ T3680] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1437.421758][T15937] EXT4-fs (loop1): bad geometry: block count 262656 exceeds size of device (132096 blocks) [ 1437.639380][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1437.759990][ T3680] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1437.769053][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.783213][ T3680] usb 4-1: config 0 descriptor?? [ 1438.039483][ T3680] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1439.199583][ T3680] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1439.208469][ T3680] usb 4-1: USB disconnect, device number 109 17:10:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000100)={0x0, 0x2, "b2bd"}, &(0x7f0000000000)=0xa) 17:10:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 17:10:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="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", 0x5ad}], 0x1, &(0x7f0000000180)=[@prinfo={0x14, 0x84, 0x7, {0x1}}, @sndrcv={0x2c}], 0x40}, 0x0) 17:10:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="f0", 0x1, 0x0, &(0x7f0000000240)={0x10, 0x2}, 0x10) 17:10:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002050019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000000), &(0x7f0000000040)=0x8) 17:10:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:10:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000001200)=0x10000, 0x4) 17:10:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000480)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2c000000b20000000600000011ce31a67df1dd3ff0c2de6712238a06a6e161d1e5a0e13c5f7d7d75eb0000003c00000006000000200000008f4a22d57401520bab297ec3a2639908807634860d76579963f48048cea161f34335f85b5964382cf0751021140000000001"], 0x168}, 0x0) [ 1439.714966][T15948] loop1: detected capacity change from 0 to 264192 [ 1439.753924][T15948] EXT4-fs (loop1): bad geometry: block count 328192 exceeds size of device (132096 blocks) 17:10:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast1}], 0x1c}, 0x0) 17:10:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x1a, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) [ 1440.039391][ T22] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1440.279301][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1440.419547][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1440.428635][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.438323][ T22] usb 4-1: config 0 descriptor?? [ 1440.689436][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1441.889423][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1441.898461][ T22] usb 4-1: USB disconnect, device number 110 17:10:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:22 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x107, &(0x7f00000005c0), &(0x7f0000000600)=0x18) 17:10:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002060019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0xc}, {0xc}], 0x18}, 0x0) 17:10:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17:10:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180), &(0x7f00000005c0)=0x3) 17:10:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000140), 0x4) 17:10:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000000c0)={0x101, 0x8, 0x7, 0x3}, 0x8) 17:10:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1203, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 1442.444144][T15974] loop1: detected capacity change from 0 to 264192 17:10:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x4, 0x0, 0x2}, 0x98) 17:10:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) getsockname(r0, 0x0, &(0x7f0000000080)) [ 1442.512419][T15974] EXT4-fs (loop1): bad geometry: block count 393728 exceeds size of device (132096 blocks) 17:10:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000300), 0x8) [ 1442.769372][ T22] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1443.029290][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1443.169502][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1443.178584][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.188867][ T22] usb 4-1: config 0 descriptor?? [ 1443.449370][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1444.629701][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1444.647055][ T22] usb 4-1: USB disconnect, device number 111 17:10:25 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002070019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x14) 17:10:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000)={0x0, 0x2}, 0x8) 17:10:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x4a) 17:10:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x1c, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 17:10:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0xb) 17:10:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000084000000070000000034"], 0x14}, 0x0) [ 1445.137150][T15994] loop1: detected capacity change from 0 to 264192 17:10:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 17:10:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000000)=0x4) [ 1445.211241][T15994] EXT4-fs (loop1): bad geometry: block count 459264 exceeds size of device (132096 blocks) 17:10:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200), 0x98) 17:10:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@init={0x14}, @sndinfo={0x1c, 0x84, 0x4, {0x401, 0x800}}, @init={0x14, 0x84, 0x1, {0x100, 0x0, 0x0, 0x800}}], 0x44}, 0x0) [ 1445.499262][T31331] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1445.739313][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1445.862319][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1445.871641][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.885649][T31331] usb 4-1: config 0 descriptor?? [ 1446.149435][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1447.329411][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1447.344817][T31331] usb 4-1: USB disconnect, device number 112 17:10:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000040), 0x4) 17:10:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002090019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40002) 17:10:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0xfffffffd, 0x0, 0x106, 0x0, 0x2}, 0x98) 17:10:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 17:10:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) bind(r0, &(0x7f0000000380)=@in={0x10, 0x2}, 0x10) 17:10:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000140), 0xc) [ 1447.862901][T16024] loop1: detected capacity change from 0 to 264192 17:10:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x10) 17:10:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x196}, 0x98) 17:10:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@sndrcv={0x2c}], 0x2c}, 0x0) 17:10:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000084000000010000007d00ff07000000e810"], 0x24}, 0x0) [ 1447.904430][T16024] EXT4-fs (loop1): bad geometry: block count 590336 exceeds size of device (132096 blocks) [ 1448.179327][ T2929] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1448.449529][ T2929] usb 4-1: Using ep0 maxpacket: 16 [ 1448.587217][ T2929] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1448.596353][ T2929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.606170][ T2929] usb 4-1: config 0 descriptor?? [ 1448.879394][ T2929] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1450.069634][ T2929] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1450.087491][ T2929] usb 4-1: USB disconnect, device number 113 17:10:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020a0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a7e2522d0425be651c2c5f18adcec94e9a1ee774ab2ee4793c6038d40e13641962ae52419595c1902f3b8b144aa095f5949d2b2fa9fb98255548687a06545e5b65c4e15d06ca96fb18fe5e68e42077afa5e5e4b7606b10f7d260afbd87f2db2a35d4e918e7ef8b0644ca10a8f8f6cbf995f897f7782c4510632ee5a1e28418d34170d2551ac87c73602facc8c8650b36746c1b7776c39cf5998ab02e307a64235da5c302c09dfae9185e983a66110077101d4028f5c2beeb3b0d11809c0c45d96f82f903d772a042c6781593e23a87267ceef2fa1a34efb3f372037b572399065c6423dc1e99bdd71659ed185b8cdf", 0xef}, {&(0x7f0000000a00)="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", 0x4aa}], 0x2, &(0x7f0000000180)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x1200}}], 0x1c}, 0x0) 17:10:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000000c0), 0x8c) 17:10:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0), 0x84) 17:10:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockname(r0, 0x0, &(0x7f0000000100)) 17:10:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080)=ANY=[], 0xc) 17:10:30 executing program 2: r0 = socket(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[], 0x3ef) 17:10:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x0, 0x1, "cd"}, 0x9) [ 1450.600659][T16046] loop1: detected capacity change from 0 to 264192 17:10:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x8c) [ 1450.684311][T16046] EXT4-fs (loop1): bad geometry: block count 655872 exceeds size of device (132096 blocks) 17:10:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300), 0x98) 17:10:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000040), &(0x7f0000000080)=0x18) [ 1450.959426][T31331] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1451.199441][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1451.319488][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1451.328695][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.339150][T31331] usb 4-1: config 0 descriptor?? [ 1451.589586][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1452.759558][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1452.769042][T31331] usb 4-1: USB disconnect, device number 114 17:10:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0xf1) 17:10:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020c0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x63) 17:10:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000380), &(0x7f0000000240)=0x98) 17:10:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x12, 0x0, 0x0, &(0x7f0000000380)=[@prinfo={0x14}], 0x14}, 0x0) 17:10:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 17:10:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x290}, 0x98) 17:10:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x800}}], 0x1c}, 0x0) [ 1453.283131][T16070] loop1: detected capacity change from 0 to 264192 17:10:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x16) [ 1453.347279][T16070] EXT4-fs (loop1): bad geometry: block count 786944 exceeds size of device (132096 blocks) 17:10:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000080)=0x98) 17:10:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000040), 0x8) [ 1453.649382][T31331] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1453.889312][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1454.009687][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1454.018859][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.029908][T31331] usb 4-1: config 0 descriptor?? [ 1454.289394][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1455.470582][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1455.484506][T31331] usb 4-1: USB disconnect, device number 115 17:10:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f00000000c0)="e6", 0x1, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 17:10:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020d0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000001200), 0x4) 17:10:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x0, 0x0, 0x0, r3}}], 0x1c}, 0x0) 17:10:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x4a04) 17:10:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb) 17:10:36 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 17:10:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x5}]}) 17:10:36 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) [ 1456.008181][T16096] loop1: detected capacity change from 0 to 264192 [ 1456.060934][T16096] EXT4-fs (loop1): bad geometry: block count 852480 exceeds size of device (132096 blocks) 17:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17:10:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1_virt_wifi\x00') [ 1456.301837][T31331] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1456.549371][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1456.669511][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1456.678922][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.690879][T31331] usb 4-1: config 0 descriptor?? [ 1456.949426][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1458.109666][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1458.126276][T31331] usb 4-1: USB disconnect, device number 116 17:10:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:38 executing program 0: kexec_load(0x6, 0x1, &(0x7f00000001c0)=[{0x0}], 0x1) 17:10:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8b", 0x1}], 0x1, &(0x7f0000000340)=[@prinfo={0x14, 0x84, 0x7, {0x2}}], 0x14}, 0x0) 17:10:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020f0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:38 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) accept(r0, 0x0, 0x0) 17:10:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) 17:10:38 executing program 5: setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0xfffffffffffffea3) 17:10:38 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0xb84, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 17:10:38 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x42c1, 0x0) 17:10:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x4a, 0x0, &(0x7f0000000080)) [ 1458.615660][T16120] loop1: detected capacity change from 0 to 264192 17:10:38 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) [ 1458.673368][T16120] EXT4-fs (loop1): bad geometry: block count 983552 exceeds size of device (132096 blocks) 17:10:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x84}}], 0x30}, 0x0) [ 1458.939468][ T5226] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1459.183316][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 1459.299720][ T5226] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1459.308860][ T5226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.319064][ T5226] usb 4-1: config 0 descriptor?? [ 1459.579526][ T5226] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1460.719515][ T5226] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1460.729075][ T5226] usb 4-1: USB disconnect, device number 117 17:10:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:41 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="14", 0x1}, {&(0x7f0000000140)='\\', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:10:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002100019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x83, 0x2}]}}}], 0x18}, 0x0) 17:10:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000040)='S', 0x1}], 0x1, &(0x7f0000001440)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x0) 17:10:41 executing program 2: r0 = gettid() sched_setparam(r0, &(0x7f0000000000)) 17:10:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 17:10:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000002c0)={0x6, 'veth0_to_hsr\x00', {0xfff}}) 17:10:41 executing program 5: syz_io_uring_setup(0x7eb, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x13b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) [ 1461.213626][T16144] loop1: detected capacity change from 0 to 264192 17:10:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e21, @empty}}}, 0x90) [ 1461.271362][T16144] EXT4-fs (loop1): bad geometry: block count 1049088 exceeds size of device (132096 blocks) 17:10:41 executing program 0: r0 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a002, 0x0) tee(r0, r1, 0x8001, 0x0) 17:10:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 1461.529407][ T22] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1461.789281][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1461.929369][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1461.938511][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.949078][ T22] usb 4-1: config 0 descriptor?? [ 1462.209390][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1463.339401][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1463.348272][ T22] usb 4-1: USB disconnect, device number 118 17:10:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 17:10:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='<', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 17:10:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:10:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002110019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000580)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 17:10:44 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xffffffffffff0166) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) 17:10:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:10:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x5000}, 0x0) [ 1463.858846][T16171] loop1: detected capacity change from 0 to 264192 17:10:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000080)=0x8) [ 1463.909658][T16171] EXT4-fs (loop1): bad geometry: block count 1114624 exceeds size of device (132096 blocks) 17:10:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b7d38685c5b8d925a3e2afb4d9c376935eb06d4d6c9f20badfe7b7f26f09d6af7b827b567e1cf154c40b492e9c70f3c6c581cfe75f3515b7a330b7d684e01270d196c9417f1222f9bd094cc82fe0ad9b01a43ee9eba523e1810c67cd387abb4485fc2aa1d2d9657451cdaa45927dab2941ebdde8c4bbb0557fa3cdedaee72d7befcd1e9ff9c3ed54aa78ab61659259535e8090f78b8eb879acda4b97bae3f7726c1b351a2b1ad033e2a8a370e4499ea96dbf01937863cc878c7297fb4c745001e81b79c9443f7101d2e53d4b78b64ecb455296e70f", 0xd5}, {&(0x7f0000001500)="e7f04dc957ba2d132b3604c7b8f15987eb7d3c9df718be06caf13bbe3b3bf0211c30984d31911c8f6727ddb14c11eb9369049e77bbeb6f57b08483e6d0a469975ada2f3dc0298098b8d3e10f7e0423ed558bc0b8f4ed008122d08db6f42f216e92b4062394a91eab071ec0edb4531f27b9e6a88be2ebb0994a7d7d56141ffa9631fc571e94b64fce72715a2390802d5c15e7779d140c9f2aa14341b2e5b4d9678adf5894c8704526faa7569754197e2468589dae827ef434687b766cca30715590233993cbb2bd4f549b48ff7ade402ed12f2ccf4ba981479fab5368161cee08e24bddc37caac680b249efe990c0103fcaf846cd4f28480992e59e919cbba83a5353f3048b4512bccbdd91b1428d133af6594dac5cd74acc2088c6b6d0e44fe93543626dbf2f473cc127650afb60e8a1c21da0de87fa344a1b8414e80d3854e927cf35269e2983b539731d907f3d181547c1fcb09c677013e796f1072ba1b02b577f273f5ffd7a3df1d2dd4c944c246d562dffeea87aaeecf2f4708aa7cfc8e4babd910e159ac1686dd003430fed449e78e0b131e20b4aae7fdfbfc7c3b03a0c44ccdae7a6eabc1bac1d99c0ced7099d72d30ef505bc370ba8ca8fb5cd69d122551f2f228e95eec6ca32bdf57fec292e5fddec6874794dbff4928534a49dc0c13a38fd654a06ed0743ca4d26427c913fd68c91704028d3086c8f31b3a441168fe297e5f5b57ca438d6b08497558a0f53b3feb45996e599713c5bd41c3ffb07bf1541f00790534ab7e756a3f1d0a0183292d9b347b75dd8b5fcc3bbde6ec7e874145a19ed53d7fb1d66954d58287e3927ce651aaddcedf5c907cf5b2cf1f62c0005948a536bc97a9c49ec5ea9f985299ba9931c1e571d04452e2c901987856e409eee7a3080c40a1514cfa6bc9b936332e858344cf984f271ecf0b7d3e878849f79a81e725b62a4028160ef3dcce79d90970484cfd4a66bdeec39d48df0f0459b5178f7a29e23673f2a68b84309ec908b08fdaa110e3f2f39444888d11479825a2ab7fb801fc447c0304eb615b4d2fad6a9b2d61172e9308f4a857c33db1be31b1f2e215ae1864eceb0c32785cd23667ee880466874aab10cb44d1c4fc7c6e0a077ec92800b5434ed0c855b4ffb8029d9ef41113cb0119ae9633abfba0ebfa9fa7e709c2ff27dde8bfeebac4b9f7e07b26d5b2869169ce18e020426ea14d0b98c7ac169a6f3efa9c0a798819eb9053023595241e72bb6969b2510a22e8e486e5ede0c01db4d9f5ac56d94378b797027315e3ecd012bb40f259929b7b3f5f07c8b011d7ed3767d3a2be509813611008dcc607559bbd9cc758b9972681bdf7c12f40fbf43e3cc4fe45cb0ca8568da145e9bc85067a01c4c105a349bf25f13d2d14a48990cc0accfa79c0a478c97bf5918fb3bdbe8de8c6972c7a0f0167ac5eede3fa2839a7dfc2e05dcace4454b0ae4b855ef2e2426161891f7993f78f5ee9e45bb9e17a3d5fd63717b3e71429c3bf1f43f7d635507fa5813288091b9ffedbc416412eca75b429e18deb3b1610136a0ff7f860fe0dd58c5864a1a309f518db50ee94a5251dde6bad4b83e879c7b7524236d8b2f1b008b8c60e61c7cb5c099c1c545654a5ad13b766d7df1c80173cfa67b01379253b839265457892872a55361e43b8b782c20d926d275bbe782df322e174bf01bcb5bc16b4741fb4135732d3e019361ebc9c4845368bf77f71c61a00818bc882cdd9b01d094138940e30ded4955fc8a4381e76427622529da578ef37604b9a37de605459e41938dc11b751044f891a45a4e4440316cf3278f2de261637e764426526f24670cf1168071353b507f0acee7d0c34a7e58bb5f518381e27f294eb94929b1142c9cb5c4c7435716be4c1ff679e475cb4218447736a76dd1e792eb17e8fe1a45732d636330e43c1c19bc1eaea869c163a794360d42b66c75f334f66a90bac58897c788055bd6644255c49a5a1eaf2654c0796d6b77cbb141c29ab48776860be3d65fd1b8b183103279a0f971d4c2463517b15343357312245a145197b3e142bcbab4d479e1d297b0ebbb920d59c2be4b6a2ceeda7cdfef785d615be6a2d3f57a1aee8dcf1a26aaaa0f67f7c889072a3b5b9601a7c0cc5c7d147ab43a5844ac9c744dfc4ee18d4d7e700205d721505c837fca279d0ff82c769d105907fd152711b6bc056690ab0d5f74588e3588091fbe08c4bdbb9be94c4a99eb485b3587ed105bd88c5652b19653b3c972e7c509d581bbc9a6fd515e03b02eba88fbdf5770de3e09b8348db16d5cb027356eb166fa484a50da47a97bef20d56eab4dd3cf80daf59e2e758637a50bbbafd20e0d65b828f91305fa48f71255369542fdaf26aa7f68e9faff2577b86e8327ada12ed1c9a9fcb4138319b2b9b031f9270851b21a0bbb62cc84e28700c732445ea4e891c7fd9072f35c165d47bbd35846c1285a4d4bab51496a903d78b03da3c6a540740e6be898e056d18df55125109f891c41415190b31f291a661fbe6250052d67781ed36ee908e3d1c0bf7c96bbf221a37d11c8cac1c568d282266a77317245d0c1997a797534fc83f14b157730e0ba12230af0521b4dfe9ea9d695a095768bdc1dec1472800166aee0a50d586c6cefcecb4f74c24f576818c66e47a9c05ee2492498a14a323048627012d0db266b5bc1208a61553b665bb9dfb63fa0df3d921d961afe32b1fd80f90819243509681b38bf7ae4c4afd7cd3e9f0dd0a2568bbce124f1ec98ad6031a69249a0006e3e959f48163dd75f18436755cfd36c50a7cf721316c1a0f2700e3a4ffcf4fb29aeee5fad195ec419784e327aa09d806eb265714eaf0ec519bcc136417e3b4bf22a3c2c4c58e4caba5091dae1c06ff11f81734b62775802e4f6559d2c8a7ad2b4e7b90eaa35d8884363eab66871ab3729c84ce362c87cf4b99b4148c1fb83cbd2171518c53cb46907454f232e9b5b7d6ef869c23d5f668654c30dcafb26eb0f55d0ced089b960616ecfe3f4fc5f150f5d448e3f2a4ece3eeaec6660453c0c5802c85bf770354f5e4f98c0f36fcf8729695cf365e0de932513f602440529502be93a72190ba675d7bf084f31905ccceda7f02e250e4036ae6aac282b41503c8a2a516a1452032ff551e2eee213eff9c735dceffc9991608db2a7c1bf5776a442189d7a9ef2ed0b5fcf68f645df5bb8a3ce37bc5417d61271ca13c04644d0d632c36c628b1bcd18f7bf18e138eeaf0162f893590ef6f65499de3d6a449392f1681928d326656e32bbce68d8dd9ef4bcbe3059d04ad5a7c54b7c9f7948fd2345047eebf0a630ad73ce3e242b7ec0723827927858892730244d495e16dd197fc16b1cf715aa038eef19a67dde73e9ba893b15823846ee5d28496952a0a3b478f6d0027ee70b51f3198f0353bee886afb33dca48981c91ebafc4934c1cb23f8546b709236e1770d031af731195ab1b9acae6a274178f061f19f6d925b730d69eb4395a96bff97482038505d3c5ef9a88f9fde80c9a8facf44e622699445ef5e3ca2032919d1087fbe79cf30e60a0769717847fabbb11b8f11fbd5d4f61fe5f0391c10cea707bcffc9ac14997515f5315722dbd7f4e877d0766c557f0be74828eb06fa08e33a22433cdb4b121a5bf1367ff4210e89ae63c270f252bdca328da92efe56d1fb87e63346cdec3cad2f3e89ba4b3b6e35c3f553e728c8bff5a6dfdfcbe2b51cea5a4e10bfbde9ddb38f89d8871e0ed904377215c91d30ffc1b0afe638c3e23ce90e27cc7e66cac540808155faf1f984e6149d3cee8d22b459b80e40a7b8655df605e584655b609e36f4a4e9a02b4b073e6ac76d657857381db91d207a91fb77044a149668187c5bc1ab38febae117de8d6ea4843c0ee716b330a2ba6e1fcc544040bc4fb539efae78db42e7c0d347c26f77eee1a21fa93f55365cac6c200bff2c5c6b82ec8dec5ac81f15a2cf138b23a0f7ebc05aa056e72c392b0909f9d7e2894a08badfdb7a846d2d1637c56e64c908acd3485c0805b72e1fc36b8a917df8a878dd34887de8d222282849235bd1d2974d05476a636f2841116c4bfcd6820196f780d6d3632a46d38491dfe5eb6beabdc9c9a36a5d91b071fcc8a8ff08a09c0b6a9e554175f3be8dab9ffba22bd97f41966894112620c259c062c5a632e0a89f492f6479c26f657c45bf31c310dfeae69878f7d939e1520c088c90f061eacc51ee93b66f0fe0351f5c54b5b43bfa1efb733ff72afebda6560ce2b85bcb08f64f328dd61d2c4413054babadfe4ab445d6095f773c0e6ea1699cc3974331658eb3e674e20ca950b29a06e0094ad6574d781cbe6d124a1047ddd58900e654bcf71338400c08ab0d833615d1ba98d88aa19b74194d90f2451eca5c7b52e9c8978e9a012c81b22b48ebc1357934d3d29c39a9c3f7ef305e42dee208286155341a78da443ccee38efce43e3652b37ec8be86ea0ec8073338e2263e1bad8ce6eff45f24d01cf68ea56fbc1c732338ad10072a3a7f2d0f47a433cde11b44bee9f8fdc4f727c9bf520d62dde1984a1d00e1a1267c94ad169d4272551c4c157b14883dca4524b938a5c31794d185e113bf0f4aeef3d4046cc3900fa1e5cf329d79a668d32d233fae5df5b3fe26d752ddba555fef1adc7f6c534fd0adcb138c535663a8ba5bcb9dc4c2acaca5a61e8673b29e4893e97b53ea5a63d16e6ba7376a9b464d5b979cb316759e95d1e306c433e20e234a65b7bc7c1aefc1b0c3e8d04fda652ccae257c3ce877090bdea1d343c26319b06f688f2cea15b5a9e121dd1d564efc1b8861546d46d2cb91aee07bae774d067bb70b614977f4a66191d594f5cbd46ab47c0f2c997d2bdbd4f53445372eb4ba90d0bf818790e845c9dcbdfeebdda1b08bf9307b3b57d207655f61954781acbcb8511fc6f3412c125a3ef4dd436e392e3381dfd7b7079b79945e9ae2c0b668062eb840ed8138647738991aa2ed01c5f9b5659822955d2b75e9d5d75bad4b94315aa7995c750d47eb81dbe899cf91", 0xdec}], 0x2}}], 0x1, 0x880) 17:10:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002260019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1464.077586][T16186] loop1: detected capacity change from 0 to 264192 [ 1464.092031][ T27] audit: type=1804 audit(1656177044.294:1400): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4290778374/syzkaller.wT1OaS/3295/bus" dev="sda1" ino=1165 res=1 errno=0 [ 1464.124592][T16186] EXT4-fs (loop1): bad geometry: block count 2490880 exceeds size of device (132096 blocks) [ 1464.139372][ T5226] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1464.149005][ T27] audit: type=1800 audit(1656177044.294:1401): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 1464.215995][ T6566] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1464.387108][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 1464.509469][ T5226] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1464.518547][ T5226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.543962][ T5226] usb 4-1: config 0 descriptor?? [ 1464.799476][ T5226] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1465.959584][ T5226] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1465.968558][ T5226] usb 4-1: USB disconnect, device number 119 17:10:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:46 executing program 2: syz_emit_ethernet(0xe81, &(0x7f0000000740)={@dev, @remote, @void, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x0, 0x6, "80658b", 0xe4b, 0x3a, 0x0, @ipv4, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}}, 0x0) 17:10:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000040)) 17:10:46 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) 17:10:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002420019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:46 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xffffffffffff0166) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) 17:10:46 executing program 2: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x7) 17:10:46 executing program 4: getpgid(0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) [ 1466.465951][T16195] loop1: detected capacity change from 0 to 264192 17:10:46 executing program 5: sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) [ 1466.533394][T16202] random: crng reseeded on system resumption [ 1466.565535][T16195] EXT4-fs (loop1): bad geometry: block count 4325888 exceeds size of device (132096 blocks) 17:10:46 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x401, 0x0) 17:10:46 executing program 4: syz_io_uring_setup(0xe14, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000240)) 17:10:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002460019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1466.649531][ T27] audit: type=1804 audit(1656177046.844:1402): pid=16203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4290778374/syzkaller.wT1OaS/3296/bus" dev="sda1" ino=1171 res=1 errno=0 [ 1466.759022][ T27] audit: type=1800 audit(1656177046.844:1403): pid=16203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1171 res=0 errno=0 [ 1466.769363][ T22] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1466.836060][T16215] loop1: detected capacity change from 0 to 264192 [ 1466.847096][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1466.860378][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1466.872402][ T2968] loop1: unable to read partition table [ 1466.887032][T16215] EXT4-fs (loop1): bad geometry: block count 4588032 exceeds size of device (132096 blocks) [ 1467.060109][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1467.193800][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1467.209316][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.220951][ T22] usb 4-1: config 0 descriptor?? [ 1467.479353][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1468.629420][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1468.639106][ T22] usb 4-1: USB disconnect, device number 120 17:10:49 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:49 executing program 5: syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) syz_io_uring_setup(0x5a36, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 17:10:49 executing program 2: syz_emit_ethernet(0xf2, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0180c200000281001e00892f"], 0x0) 17:10:49 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 17:10:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002480019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0xc0}, 0x8) 17:10:49 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9, 0x7}, {0x0, 0x0, 0x80, 0x8000}]}) 17:10:49 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:10:49 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 1469.145082][T16225] loop1: detected capacity change from 0 to 264192 17:10:49 executing program 5: r0 = socket(0x18, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xffffffffffffff30) 17:10:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x77359400}, 0x10) 17:10:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)='1', 0x1}], 0x1}, 0x0) [ 1469.192047][T16225] EXT4-fs (loop1): bad geometry: block count 4719104 exceeds size of device (132096 blocks) [ 1469.479398][ T5226] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1469.719371][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 1469.840042][ T5226] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1469.849140][ T5226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.860901][ T5226] usb 4-1: config 0 descriptor?? [ 1470.119360][ T5226] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1471.280635][ T5226] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1471.289644][ T5226] usb 4-1: USB disconnect, device number 121 17:10:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000024a0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:51 executing program 0: socketpair(0xa, 0x1, 0x3c, &(0x7f00000003c0)) 17:10:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) 17:10:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) 17:10:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f0000002540)='~', 0x1, 0x0, &(0x7f00000025c0)=@in={0x10, 0x2}, 0x10) 17:10:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000000)) 17:10:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)) 17:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) [ 1471.795079][T16247] loop1: detected capacity change from 0 to 264192 17:10:52 executing program 2: socket(0x1d, 0x0, 0x7) [ 1471.864486][T16247] EXT4-fs (loop1): bad geometry: block count 4850176 exceeds size of device (132096 blocks) 17:10:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002840), r0) 17:10:52 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) [ 1472.109557][ T22] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1472.389286][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1472.549453][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1472.558638][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.568447][ T22] usb 4-1: config 0 descriptor?? [ 1472.839498][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1474.009513][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1474.018434][ T22] usb 4-1: USB disconnect, device number 122 17:10:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="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", 0xa91}], 0x1}, 0xcc) 17:10:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000024c0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:54 executing program 5: syz_emit_ethernet(0x15, &(0x7f0000000000)={@broadcast, @local, @val={@void, {0x8100, 0x5}}, {@llc_tr={0x11, {@llc={0x0, 0x0, "86"}}}}}, 0x0) 17:10:54 executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 17:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 17:10:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 17:10:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8992, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1474.529879][T16270] loop1: detected capacity change from 0 to 264192 17:10:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000080)) [ 1474.572359][ T27] audit: type=1804 audit(1656177054.774:1404): pid=16277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4290778374/syzkaller.wT1OaS/3300/bus" dev="sda1" ino=1163 res=1 errno=0 [ 1474.606884][T16270] EXT4-fs (loop1): bad geometry: block count 4981248 exceeds size of device (132096 blocks) 17:10:54 executing program 5: socket(0x18, 0x0, 0xf8) 17:10:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, @in6={0xa, 0x0, 0x0, @empty}], 0x38) 17:10:54 executing program 4: r0 = syz_io_uring_setup(0x3507, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 1474.671800][ T27] audit: type=1800 audit(1656177054.774:1405): pid=16277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 1474.869799][ T3680] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1475.119353][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1475.239471][ T3680] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1475.248550][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.260149][ T3680] usb 4-1: config 0 descriptor?? [ 1475.519536][ T3680] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1476.699526][ T3680] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1476.716595][ T3680] usb 4-1: USB disconnect, device number 123 17:10:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:10:57 executing program 5: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000240)) 17:10:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002600019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:10:57 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x400, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x2800}, 0x8010) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x2001, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 17:10:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) 17:10:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private}}}], 0x70}, 0x0) 17:10:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='macvlan0\x00'}) 17:10:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 17:10:57 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)) [ 1477.215935][T16294] random: crng reseeded on system resumption [ 1477.238846][T16300] loop1: detected capacity change from 0 to 264192 17:10:57 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 17:10:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1477.315587][T16300] EXT4-fs (loop1): bad geometry: block count 6291968 exceeds size of device (132096 blocks) 17:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000400)={0x0, r1/1000+10000}, 0x10) [ 1477.689309][ T2929] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1477.929286][ T2929] usb 4-1: Using ep0 maxpacket: 16 [ 1478.049458][ T2929] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1478.058538][ T2929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.068939][ T2929] usb 4-1: config 0 descriptor?? [ 1478.319401][ T2929] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1479.499640][ T2929] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1479.511964][ T2929] usb 4-1: USB disconnect, device number 124 17:11:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002680019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:00 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 17:11:00 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) 17:11:00 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) 17:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0xfffffffffffffedf}}, 0x0) 17:11:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8929, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x34}}, 0x0) 17:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 17:11:00 executing program 5: socket$packet(0x11, 0x0, 0x300) syz_io_uring_complete(0x0) syz_io_uring_setup(0x5a36, &(0x7f0000000540), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 1480.069863][T16324] loop1: detected capacity change from 0 to 264192 17:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xc, 0x0, &(0x7f0000000080)) 17:11:00 executing program 2: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) [ 1480.112135][T16324] EXT4-fs (loop1): bad geometry: block count 6816256 exceeds size of device (132096 blocks) [ 1480.349458][ T5226] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1480.589369][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 1480.709473][ T5226] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1480.718560][ T5226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.728270][ T5226] usb 4-1: config 0 descriptor?? [ 1480.989390][ T5226] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1482.169488][ T5226] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1482.182224][ T5226] usb 4-1: USB disconnect, device number 125 17:11:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000140)) 17:11:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000026c0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:02 executing program 5: socketpair(0x25, 0x5, 0x8001, &(0x7f0000000040)) 17:11:02 executing program 0: socketpair(0x1e, 0x0, 0x2269, &(0x7f0000000000)) 17:11:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) 17:11:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x100}, 0x8) 17:11:02 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) [ 1482.674745][T16341] loop1: detected capacity change from 0 to 264192 17:11:02 executing program 2: clock_getres(0x2, &(0x7f00000003c0)) 17:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x37, 0x0, &(0x7f0000000080)) [ 1482.766025][T16341] EXT4-fs (loop1): bad geometry: block count 7078400 exceeds size of device (132096 blocks) 17:11:03 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'gretap0\x00', 0x0}) 17:11:03 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0xc0185879, &(0x7f0000000000)) [ 1482.904233][T16362] loop4: detected capacity change from 0 to 262160 [ 1482.921606][ T2968] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.930926][ T2968] Buffer I/O error on dev loop4, logical block 0, async page read [ 1482.940072][ T2968] loop4: unable to read partition table [ 1482.999420][ T3680] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1483.249401][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1483.369576][ T3680] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1483.378720][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.395887][ T3680] usb 4-1: config 0 descriptor?? [ 1483.660584][ T3680] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1484.829404][ T3680] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1484.838883][ T3680] usb 4-1: USB disconnect, device number 126 17:11:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:05 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002740019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:11:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @private}}}], 0x20}, 0x0) 17:11:05 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0xc0185879, &(0x7f0000000000)) 17:11:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x401c5820, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1485.356354][T16369] loop4: detected capacity change from 0 to 262160 [ 1485.358573][T16372] loop1: detected capacity change from 0 to 264192 17:11:05 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:05 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0xc0185879, &(0x7f0000000000)) 17:11:05 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800005, 0x10, r0, 0x8000000) [ 1485.415968][T16372] EXT4-fs (loop1): bad geometry: block count 7602688 exceeds size of device (132096 blocks) 17:11:05 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) [ 1485.528620][T16382] loop4: detected capacity change from 0 to 262160 [ 1485.536242][ T6566] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1485.567257][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 1485.594425][ T6566] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1485.606675][ T6566] Buffer I/O error on dev loop4, logical block 0, async page read [ 1485.623424][ T6566] loop4: unable to read partition table [ 1485.646643][ T22] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1485.909374][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1486.049395][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1486.058547][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.069100][ T22] usb 4-1: config 0 descriptor?? [ 1486.319553][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1487.489393][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1487.498719][ T22] usb 4-1: USB disconnect, device number 127 17:11:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000027a0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:08 executing program 0: syz_io_uring_setup(0x5a36, &(0x7f0000000540), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 17:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x19, 0x0, &(0x7f0000000080)) 17:11:08 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:08 executing program 4: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1487.992976][T16390] loop1: detected capacity change from 0 to 264192 17:11:08 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:08 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 17:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x3, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf253e00000008000300ee213959f3426b71e607a2849e45a8f0717645d83f59c8116fdea8f8dc33b554156133131db59ae0ace7a914f7c096d3836443031081273175ca5471668a981000619564c349ef8ea91ac2f6a930e1579b5daf998588", @ANYRES32, @ANYBLOB="0c0099000700000066000000"], 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x50) 17:11:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, 0x0}) [ 1488.044799][T16390] EXT4-fs (loop1): bad geometry: block count 7995904 exceeds size of device (132096 blocks) 17:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 17:11:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x1, 0x0, 0xc0}, 0x8) [ 1488.339491][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1488.579353][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1488.730194][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1488.739450][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.749033][ T22] usb 4-1: config 0 descriptor?? [ 1488.999500][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1489.380687][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.388234][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.109442][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1490.118715][ T22] usb 4-1: USB disconnect, device number 2 17:11:10 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:10 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002aa0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x9, 0x0, &(0x7f0000000080)) 17:11:10 executing program 2: syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) syz_io_uring_setup(0x5a36, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x68}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 17:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x5, 0x0, &(0x7f0000000080)) 17:11:10 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 17:11:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:10 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) [ 1490.600593][T16420] loop1: detected capacity change from 0 to 264192 17:11:10 executing program 0: socket(0x10, 0x0, 0x7ff) 17:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) [ 1490.665442][T16420] EXT4-fs (loop1): bad geometry: block count 11141632 exceeds size of device (132096 blocks) 17:11:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) [ 1490.797757][T16434] loop2: detected capacity change from 0 to 262160 [ 1490.934757][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1491.179322][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1491.309975][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1491.319041][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.329484][ T22] usb 4-1: config 0 descriptor?? [ 1491.579429][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1492.749428][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1492.767019][ T22] usb 4-1: USB disconnect, device number 3 17:11:13 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002ca0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:13 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 17:11:13 executing program 0: getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) 17:11:13 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) 17:11:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:13 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 17:11:13 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x3013, r0, 0x8000000) [ 1493.214721][T16443] loop2: detected capacity change from 0 to 262160 [ 1493.222051][T16444] loop1: detected capacity change from 0 to 264192 17:11:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r1, 0x213, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x2c}}, 0x0) 17:11:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:13 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:13 executing program 0: socket(0x0, 0x0, 0x3) [ 1493.295666][T16444] EXT4-fs (loop1): bad geometry: block count 13238784 exceeds size of device (132096 blocks) [ 1493.387571][T16455] loop2: detected capacity change from 0 to 262160 [ 1493.549333][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1493.809404][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1493.940420][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1493.949550][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.959905][ T22] usb 4-1: config 0 descriptor?? [ 1494.219539][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1495.359437][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1495.368815][ T22] usb 4-1: USB disconnect, device number 4 17:11:16 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002d30019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:16 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:16 executing program 4: r0 = gettid() sched_setparam(r0, &(0x7f0000000000)=0x80000001) 17:11:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:16 executing program 0: socket$inet_udp(0x2, 0x10, 0x0) 17:11:16 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8995, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:16 executing program 4: socketpair(0x1, 0x4, 0x0, &(0x7f0000000300)) [ 1495.842747][T16470] loop1: detected capacity change from 0 to 264192 [ 1495.844051][T16467] loop2: detected capacity change from 0 to 262160 [ 1495.867338][T16470] EXT4-fs (loop1): bad geometry: block count 13828608 exceeds size of device (132096 blocks) 17:11:16 executing program 2: ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x30) 17:11:16 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002fe0019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1496.054005][T16485] loop1: detected capacity change from 0 to 264192 [ 1496.071330][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1496.081643][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1496.090933][ T2968] loop1: unable to read partition table [ 1496.097782][T16485] EXT4-fs (loop1): bad geometry: block count 16646656 exceeds size of device (132096 blocks) [ 1496.149553][ T5226] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1496.389347][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 1496.539894][ T5226] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1496.548976][ T5226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.558801][ T5226] usb 4-1: config 0 descriptor?? [ 1496.809565][ T5226] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1497.939510][ T5226] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1497.948881][ T5226] usb 4-1: USB disconnect, device number 5 17:11:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:18 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 17:11:18 executing program 2: ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x30) 17:11:18 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002250119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:18 executing program 2: ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x30) [ 1498.410834][T16494] loop1: detected capacity change from 0 to 264192 17:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) 17:11:18 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17:11:18 executing program 4: socket(0x22, 0x0, 0x200) [ 1498.459085][T16494] EXT4-fs (loop1): bad geometry: block count 19202560 exceeds size of device (132096 blocks) 17:11:18 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}}}}}}, 0x0) 17:11:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002650119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1498.628553][T16511] loop1: detected capacity change from 0 to 264192 [ 1498.634843][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1498.648533][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1498.666684][ T2968] loop1: unable to read partition table [ 1498.682279][T16511] EXT4-fs (loop1): bad geometry: block count 23396864 exceeds size of device (132096 blocks) [ 1498.761181][T30949] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1498.769496][ T3680] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1499.029354][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1499.150570][ T3680] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1499.159718][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.169071][ T3680] usb 4-1: config 0 descriptor?? [ 1499.429558][ T3680] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1500.569540][ T3680] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1500.580015][ T3680] usb 4-1: USB disconnect, device number 6 17:11:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:21 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x410b80, 0x0) 17:11:21 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x22, 0x0, &(0x7f0000000080)) 17:11:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002fa0119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:21 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}}}}}}, 0x0) 17:11:21 executing program 0: sendto(0xffffffffffffffff, 0x0, 0x0, 0x4004814, 0x0, 0x0) syz_io_uring_complete(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x7) 17:11:21 executing program 4: kexec_load(0x0, 0x1, &(0x7f00000001c0)=[{0x0}], 0x0) 17:11:21 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}}}}}}, 0x0) [ 1501.071265][T16521] loop2: detected capacity change from 0 to 262160 [ 1501.078876][T16522] loop1: detected capacity change from 0 to 264192 17:11:21 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:21 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371"}}}}}, 0x0) 17:11:21 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 1501.186737][T16522] EXT4-fs (loop1): bad geometry: block count 33161728 exceeds size of device (132096 blocks) [ 1501.272769][T16534] loop2: detected capacity change from 0 to 262160 [ 1501.412636][ T3676] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1501.679302][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1501.809443][ T3676] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1501.818556][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.833359][ T3676] usb 4-1: config 0 descriptor?? [ 1502.099417][ T3676] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1503.229652][ T3676] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1503.241564][ T3676] usb 4-1: USB disconnect, device number 7 17:11:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:23 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371"}}}}}, 0x0) 17:11:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40086602, 0x0) 17:11:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002330219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2800}, 0x8010) read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/203, 0xcb) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x2001, 0x0) 17:11:23 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="b7", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000140000000000000000000000010000009e0000000000000011000000000000000000000001000000080000000000000064000000000000000000000007000000940400008913d100000000ac1414aaac141434ac1414aa860c000000010506d53f2bd8861f0000000301079c82acac3002120852edccd225915e603b66aad5c8aaa700830f127f", @ANYRES32=0x0, @ANYBLOB="0a010102ac1414aa00000000070001"], 0x140}}], 0x1, 0x0) [ 1503.715886][T16543] loop2: detected capacity change from 0 to 262160 [ 1503.717782][T16546] loop1: detected capacity change from 0 to 264192 17:11:23 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371"}}}}}, 0x0) 17:11:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) [ 1503.756334][T16544] random: crng reseeded on system resumption [ 1503.792762][T16546] EXT4-fs (loop1): bad geometry: block count 36897280 exceeds size of device (132096 blocks) 17:11:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002350219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:24 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b"}}}}}, 0x0) 17:11:24 executing program 0: clock_getres(0x0, &(0x7f0000000380)) [ 1503.918567][T16554] loop2: detected capacity change from 0 to 262160 [ 1503.955316][T16559] loop1: detected capacity change from 0 to 264192 [ 1503.978137][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.006415][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1504.016119][ T6566] loop1: unable to read partition table [ 1504.023543][T16559] EXT4-fs (loop1): bad geometry: block count 37028352 exceeds size of device (132096 blocks) [ 1504.229291][ T2929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1504.489297][ T2929] usb 4-1: Using ep0 maxpacket: 16 [ 1504.609473][ T2929] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1504.618574][ T2929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.628518][ T2929] usb 4-1: config 0 descriptor?? [ 1504.899800][ T2929] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1506.049378][ T2929] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1506.058715][ T2929] usb 4-1: USB disconnect, device number 8 17:11:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:26 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b"}}}}}, 0x0) 17:11:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000380)={0xa, 0x4}, 0xc) 17:11:26 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x6000, 0x0) 17:11:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002690219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:26 executing program 4: syz_emit_ethernet(0xf2, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0180c200000281"], 0x0) 17:11:26 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b"}}}}}, 0x0) 17:11:26 executing program 0: syz_io_uring_setup(0x1058, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) [ 1506.549439][T16567] loop2: detected capacity change from 0 to 262160 [ 1506.570482][T16571] loop1: detected capacity change from 0 to 264192 17:11:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) [ 1506.649991][T16571] EXT4-fs (loop1): bad geometry: block count 40436224 exceeds size of device (132096 blocks) 17:11:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) 17:11:26 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c"}}}}}, 0x0) [ 1506.726814][T16580] loop2: detected capacity change from 0 to 262160 [ 1506.869693][ T5226] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1507.109423][ T5226] usb 4-1: Using ep0 maxpacket: 16 [ 1507.229524][ T5226] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1507.243345][ T5226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.253188][ T5226] usb 4-1: config 0 descriptor?? [ 1507.509472][ T5226] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1508.659675][ T5226] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1508.676984][ T5226] usb 4-1: USB disconnect, device number 9 17:11:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002e10219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:29 executing program 0: socket$inet_udp(0x5, 0x2, 0x0) 17:11:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:29 executing program 4: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5a36, &(0x7f0000000540)={0x0, 0xd04f, 0x0, 0x0, 0x68, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 17:11:29 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 17:11:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x7ffffffff000}, 0x0) 17:11:29 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x3f16, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0xac1e0006, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 17:11:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) [ 1509.193985][T16597] loop1: detected capacity change from 0 to 264192 [ 1509.230025][T16597] EXT4-fs (loop1): bad geometry: block count 48300544 exceeds size of device (132096 blocks) 17:11:29 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000240)=ANY=[]}) 17:11:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) 17:11:29 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='<', 0x1}], 0x1}}], 0x1, 0x0) [ 1509.449637][T31331] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1509.539938][ T27] audit: type=1804 audit(1656177089.744:1406): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir732672101/syzkaller.Hr2x6f/3199/bus" dev="sda1" ino=1159 res=1 errno=0 [ 1509.575612][ T27] audit: type=1800 audit(1656177089.774:1407): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 1509.689475][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1509.811438][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1509.820607][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.838141][T31331] usb 4-1: config 0 descriptor?? [ 1510.099480][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1511.259590][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1511.277685][T31331] usb 4-1: USB disconnect, device number 10 17:11:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:31 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000056c0)) 17:11:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x201, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 17:11:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) 17:11:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x28, 0x0, &(0x7f0000000080)) 17:11:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) [ 1511.772255][T16614] loop1: detected capacity change from 0 to 264192 [ 1511.811613][T16614] EXT4-fs (loop1): bad geometry: block count 50332160 exceeds size of device (132096 blocks) 17:11:32 executing program 5: syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local, @dev, @val, {@ipv6={0x86dd, @udp={0x0, 0x6, "b6f7c0", 0x48, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "233e9eb6e1141b9319961aaa0cab40bf61600b8bb030832d", "28ededa80d762ada7df5384179cd648408f8292aa4381360751eb641ee2e0148"}}}}}}}, 0x0) [ 1511.898001][ T27] audit: type=1804 audit(1656177092.094:1408): pid=16628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir732672101/syzkaller.Hr2x6f/3200/bus" dev="sda1" ino=1169 res=1 errno=0 17:11:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0xfffffffffffffffc) 17:11:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002200319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1511.927907][ T27] audit: type=1800 audit(1656177092.124:1409): pid=16628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1169 res=0 errno=0 [ 1511.930630][T16631] FAT-fs (loop2): bogus number of reserved sectors [ 1512.039540][T16631] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1512.049402][T31331] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1512.058052][T16638] loop1: detected capacity change from 0 to 264192 [ 1512.078708][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1512.096375][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1512.114820][ T6566] loop1: unable to read partition table [ 1512.140793][T16638] EXT4-fs (loop1): bad geometry: block count 52429312 exceeds size of device (132096 blocks) [ 1512.289503][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1512.419685][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1512.431156][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.448385][T31331] usb 4-1: config 0 descriptor?? [ 1512.709437][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1513.869586][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1513.885300][T31331] usb 4-1: USB disconnect, device number 11 17:11:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 17:11:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) 17:11:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002b50319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) 17:11:34 executing program 5: io_uring_setup(0x5592, &(0x7f00000001c0)) syz_io_uring_setup(0x68da, &(0x7f0000000000)={0x0, 0xed53}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:11:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) [ 1514.389626][T16646] FAT-fs (loop2): bogus number of reserved sectors [ 1514.407696][T16648] loop1: detected capacity change from 0 to 264192 [ 1514.409460][T16646] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="13b91e1116b981170c4fb01d70cabe0a", 0x10}], 0x1}}], 0x1, 0x0) [ 1514.438969][T16648] EXT4-fs (loop1): bad geometry: block count 62194176 exceeds size of device (132096 blocks) 17:11:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002c00319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) [ 1514.604902][T16661] loop1: detected capacity change from 0 to 264192 [ 1514.610911][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1514.620923][T16660] FAT-fs (loop2): bogus number of reserved sectors [ 1514.635205][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1514.646104][T16660] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1514.657478][ T2968] loop1: unable to read partition table [ 1514.678303][T16661] EXT4-fs (loop1): bad geometry: block count 62915072 exceeds size of device (132096 blocks) [ 1514.699311][T31331] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1514.949354][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1515.069546][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1515.078695][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.090128][T31331] usb 4-1: config 0 descriptor?? [ 1515.349477][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1516.509634][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1516.518574][T31331] usb 4-1: USB disconnect, device number 12 17:11:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000700)=0x40) 17:11:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002c80319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 17:11:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x2e, 0x0, &(0x7f0000000080)) 17:11:37 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="14", 0x1}, {&(0x7f0000000140)='\\', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:11:37 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) [ 1517.022546][T16673] loop1: detected capacity change from 0 to 264192 [ 1517.059309][T16674] FAT-fs (loop2): bogus number of reserved sectors [ 1517.066027][T16674] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}], 0x80}, 0x0) [ 1517.077898][T16673] EXT4-fs (loop1): bad geometry: block count 63439360 exceeds size of device (132096 blocks) 17:11:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=@caif, 0x80) 17:11:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 17:11:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002f10319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1517.234773][T16688] loop1: detected capacity change from 0 to 264192 [ 1517.283656][T16688] EXT4-fs (loop1): bad geometry: block count 66126336 exceeds size of device (132096 blocks) [ 1517.319370][ T3676] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1517.589297][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1517.731241][ T3676] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1517.740359][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.750153][ T3676] usb 4-1: config 0 descriptor?? [ 1518.009481][ T3676] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1519.161508][ T3676] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1519.170786][ T3676] usb 4-1: USB disconnect, device number 13 17:11:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:39 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x40) 17:11:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002f50319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:39 executing program 4: msgget(0x2, 0x310) 17:11:39 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)="e7", 0x1}, 0x0) 17:11:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000bcccdf"], 0x1c}}, 0x0) 17:11:39 executing program 0: syz_io_uring_setup(0x493e, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 17:11:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1519.679549][T16697] FAT-fs (loop2): bogus number of reserved sectors [ 1519.682593][T16700] loop1: detected capacity change from 0 to 264192 [ 1519.686120][T16697] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) [ 1519.735281][T16700] EXT4-fs (loop1): bad geometry: block count 66388480 exceeds size of device (132096 blocks) 17:11:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='i', 0x1}], 0x1}}], 0x1, 0x40044) 17:11:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) [ 1519.862456][T16709] FAT-fs (loop2): bogus number of reserved sectors [ 1519.878558][T16709] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1519.989415][ T3676] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1520.269375][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1520.399393][ T3676] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1520.408482][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.418344][ T3676] usb 4-1: config 0 descriptor?? [ 1520.679379][ T3676] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1522.049384][ T3676] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1522.058544][ T3676] usb 4-1: USB disconnect, device number 14 17:11:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002fc0319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x1e, 0x0, &(0x7f0000000080)) 17:11:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)='1', 0x1}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 17:11:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:42 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) [ 1522.527135][T16721] loop2: detected capacity change from 0 to 262160 [ 1522.527276][T16720] loop1: detected capacity change from 0 to 264192 [ 1522.550718][T16723] batadv_slave_0: mtu less than device minimum 17:11:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="85a163bc5f98c6038e221dd7cd", 0xd}, {&(0x7f0000000040)="2664475dff12a953a16953fe3250df9e77c8bd36481f7526c1c3f822b24bd26ea9dbb043d0bcbed48bc97f57cffa35eacdd1774866974c5c2dbc0aec5817c9a7c45ac2e66f6d40c1c564681427f4f77113a066", 0x53}, {0x0}, {&(0x7f00000002c0)}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b7d38685c5b8d925a3e2afb4d9c376935eb06d4d6c9f20badfe7b7f26f09d6af7b827b567e1cf154c40b492e9c70f3c6c581cfe75f3515b7a330b7d684e01270d196c9417f1222f9bd094cc82fe0ad9b01a43ee9eba523e1810c67cd387abb4485fc2aa1d2d9657451cdaa45927dab2941ebdde8c4bbb0557fa3cdedaee72d7befcd1e9ff9c3ed54aa78ab61659259535e8090f78b8eb879acda4b97bae3f7726c1b351a2b1ad033e2a8a370e4499ea96dbf01937863cc878c7297fb4c745001e81b79c9443f7101d2e53d4b78b64ecb4552", 0xd2}, {&(0x7f0000001500)="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", 0xdef}], 0x2}}], 0x2, 0x0) [ 1522.572628][T16721] FAT-fs (loop2): bogus number of reserved sectors [ 1522.588584][T16720] EXT4-fs (loop1): bad geometry: block count 66847232 exceeds size of device (132096 blocks) [ 1522.600588][T16721] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='i', 0x1}], 0x1}}], 0x1, 0x0) 17:11:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:42 executing program 5: syz_io_uring_setup(0x5da6, &(0x7f0000001080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001100), &(0x7f0000001140)) 17:11:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002fd0319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1522.744303][T16736] loop2: detected capacity change from 0 to 262160 [ 1522.754463][ T6566] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1522.765667][T16738] loop1: detected capacity change from 0 to 264192 [ 1522.773085][T30949] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1522.777985][ T6566] Buffer I/O error on dev loop2, logical block 0, async page read [ 1522.791768][T30949] Buffer I/O error on dev loop1, logical block 0, async page read [ 1522.807732][ T6566] loop2: unable to read partition table [ 1522.811918][T30949] loop1: unable to read partition table [ 1522.820722][T16736] FAT-fs (loop2): bogus number of reserved sectors [ 1522.827530][T16736] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1522.834588][ T22] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1522.852588][T16738] EXT4-fs (loop1): bad geometry: block count 66912768 exceeds size of device (132096 blocks) [ 1523.099314][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 1523.239487][ T22] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1523.248570][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.264192][ T22] usb 4-1: config 0 descriptor?? [ 1523.519378][ T22] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1524.889401][ T22] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1524.899142][ T22] usb 4-1: USB disconnect, device number 15 17:11:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:11:45 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xe, 0x0, &(0x7f0000000080)) 17:11:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002fe0319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180), 0x4) 17:11:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xf, 0x0, &(0x7f0000000080)) 17:11:45 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000140)='\\', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:11:45 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x183802, 0x0) 17:11:45 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) [ 1525.377686][T16748] loop2: detected capacity change from 0 to 262160 [ 1525.406536][T16750] loop1: detected capacity change from 0 to 264192 17:11:45 executing program 0: syz_io_uring_setup(0x5a36, &(0x7f0000000540), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) 17:11:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'netdevsim0\x00'}) [ 1525.440794][T16748] FAT-fs (loop2): bogus number of reserved sectors [ 1525.447355][T16748] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1525.463600][T16750] EXT4-fs (loop1): bad geometry: block count 66978304 exceeds size of device (132096 blocks) 17:11:45 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x183a01, 0x0) [ 1525.709488][T31331] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1525.949336][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1526.069454][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1526.078669][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.089760][T31331] usb 4-1: config 0 descriptor?? [ 1526.350735][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1527.719541][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1527.737130][T31331] usb 4-1: USB disconnect, device number 16 17:11:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 17:11:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 17:11:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000519000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:48 executing program 5: socketpair(0x23, 0x0, 0x1000, &(0x7f0000000000)) 17:11:48 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) read$snapshot(r0, 0x0, 0x0) 17:11:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x1, 0x4, 0xc0, 0x100}, 0x8) [ 1528.196026][T16770] loop2: detected capacity change from 0 to 262160 [ 1528.210918][T16775] loop1: detected capacity change from 0 to 264192 17:11:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1528.263956][T16770] FAT-fs (loop2): bogus number of reserved sectors [ 1528.275877][T16775] EXT4-fs (loop1): bad geometry: block count 83886592 exceeds size of device (132096 blocks) 17:11:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='<', 0x1}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 17:11:48 executing program 5: socketpair(0x2c, 0x3, 0xffff, &(0x7f0000000100)) 17:11:48 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000002d00)) [ 1528.305060][T16770] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000619000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1528.458009][T16791] loop1: detected capacity change from 0 to 264192 [ 1528.478415][T16791] EXT4-fs (loop1): bad geometry: block count 100663808 exceeds size of device (132096 blocks) [ 1528.523532][T31331] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1528.769551][T31331] usb 4-1: Using ep0 maxpacket: 16 [ 1528.889447][T31331] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1528.903179][T31331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.917962][T31331] usb 4-1: config 0 descriptor?? [ 1529.179511][T31331] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1530.759430][T31331] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1530.778244][T31331] usb 4-1: USB disconnect, device number 17 17:11:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)) 17:11:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:51 executing program 4: syz_io_uring_setup(0x42de, &(0x7f0000000000)={0x0, 0xfcaf}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:11:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000719000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:51 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) 17:11:51 executing program 0: socketpair$tipc(0x1e, 0xa3dff4cd2eb059d, 0x0, 0x0) [ 1531.242718][T16797] loop2: detected capacity change from 0 to 262160 [ 1531.270574][T16801] loop1: detected capacity change from 0 to 264192 [ 1531.285864][T16797] FAT-fs (loop2): bogus number of reserved sectors 17:11:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 17:11:51 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 17:11:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000008c0)=0x2282, 0x4) 17:11:51 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) [ 1531.299010][T16801] EXT4-fs (loop1): bad geometry: block count 117441024 exceeds size of device (132096 blocks) [ 1531.329635][T16797] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:51 executing program 0: socket$inet_udp(0xa, 0x2, 0x0) 17:11:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 17:11:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000919000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:51 executing program 5: r0 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) 17:11:51 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) 17:11:51 executing program 3: clock_getres(0x5, &(0x7f0000000240)) [ 1531.503766][T16820] loop2: detected capacity change from 0 to 262160 [ 1531.523492][T16818] loop1: detected capacity change from 0 to 264192 17:11:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x39, 0x0, &(0x7f0000000080)) 17:11:51 executing program 5: sched_setscheduler(0x0, 0x3, &(0x7f0000000000)) 17:11:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) 17:11:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x2}]}}}], 0x18}, 0x0) [ 1531.558951][T16820] FAT-fs (loop2): bogus number of reserved sectors [ 1531.587064][T16820] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1531.596099][T16818] EXT4-fs (loop1): bad geometry: block count 150995456 exceeds size of device (132096 blocks) 17:11:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) 17:11:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000a19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17:11:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 17:11:51 executing program 5: socket$inet_udp(0x2, 0xf, 0x0) 17:11:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xbf}}, 0x18) 17:11:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 17:11:52 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3}]}) 17:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="85", 0x1}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b7", 0x1}], 0x1}}], 0x2, 0x0) [ 1531.774018][T16841] loop2: detected capacity change from 0 to 262160 [ 1531.804618][T16847] loop1: detected capacity change from 0 to 264192 [ 1531.813462][T16841] FAT-fs (loop2): bogus number of reserved sectors 17:11:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="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", 0x4e5}], 0x1}, 0xcc) [ 1531.839099][T16847] EXT4-fs (loop1): bad geometry: block count 167772672 exceeds size of device (132096 blocks) [ 1531.849419][T16841] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:52 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) 17:11:52 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x2, 0x0) 17:11:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000c19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) 17:11:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="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", 0x4e5}], 0x1}, 0xcc) 17:11:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 17:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x103, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 1531.987861][T16862] loop2: detected capacity change from 0 to 262160 [ 1532.025548][T16868] loop1: detected capacity change from 0 to 264192 17:11:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b1, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1532.044968][T16862] FAT-fs (loop2): bogus number of reserved sectors [ 1532.082182][T16862] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340), 0x4) [ 1532.098610][T16868] EXT4-fs (loop1): bad geometry: block count 201327104 exceeds size of device (132096 blocks) 17:11:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8911, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 17:11:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) 17:11:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000d19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0x0) 17:11:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='<', 0x1}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) 17:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080)) 17:11:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b47, 0x0) 17:11:52 executing program 5: syz_io_uring_setup(0x4aaa, &(0x7f0000000000)={0x0, 0x7ce5}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x0, 0x0) [ 1532.242748][T16889] loop2: detected capacity change from 0 to 262160 [ 1532.266935][T16891] loop1: detected capacity change from 0 to 264192 [ 1532.277484][ T2968] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1532.314576][ T2968] Buffer I/O error on dev loop2, logical block 0, async page read [ 1532.325144][T16891] EXT4-fs (loop1): bad geometry: block count 218104320 exceeds size of device (132096 blocks) [ 1532.327689][ T2968] loop2: unable to read partition table 17:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080)) 17:11:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000f19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:52 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000540), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 17:11:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) [ 1532.367140][T16889] FAT-fs (loop2): bogus number of reserved sectors [ 1532.402949][T16889] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000700)) 17:11:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="b7", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYRES32=0x0, @ANYBLOB='\n'], 0x140}}], 0x1, 0x0) 17:11:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f0000000000)='@', 0x1, 0x0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) [ 1532.476657][T16908] loop1: detected capacity change from 0 to 264192 [ 1532.512152][T16908] EXT4-fs (loop1): bad geometry: block count 251658752 exceeds size of device (132096 blocks) [ 1532.550817][T16911] loop2: detected capacity change from 0 to 262160 [ 1532.598199][T16911] FAT-fs (loop2): bogus number of reserved sectors [ 1532.634159][T16911] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:53 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:53 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4c05309f20f75490, r0, 0x10000000) 17:11:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002201019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}, 0x0) 17:11:53 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) 17:11:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:53 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/203, 0xcb) 17:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x1, 0x0) 17:11:53 executing program 5: sched_setparam(0x0, &(0x7f0000000000)=0x80000001) [ 1533.177995][T16921] loop1: detected capacity change from 0 to 264192 [ 1533.200599][T16927] loop2: detected capacity change from 0 to 262160 [ 1533.228322][T16921] EXT4-fs (loop1): bad geometry: block count 270533120 exceeds size of device (132096 blocks) [ 1533.252654][T16927] FAT-fs (loop2): bogus number of reserved sectors 17:11:53 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1533.274515][T16927] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:53 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/4096, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 17:11:53 executing program 4: socketpair(0x2f, 0x0, 0x0, &(0x7f0000000140)) 17:11:53 executing program 3: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5a36, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x68, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 17:11:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:53 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='pim6reg0\x00') [ 1533.438451][T16947] loop1: detected capacity change from 0 to 264192 [ 1533.444821][T16948] loop2: detected capacity change from 0 to 262160 17:11:53 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) 17:11:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000140)) [ 1533.480862][T16947] EXT4-fs (loop1): bad geometry: block count 285213184 exceeds size of device (132096 blocks) [ 1533.513547][T16948] FAT-fs (loop2): bogus number of reserved sectors 17:11:53 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x47, 0x0, &(0x7f0000000080)) 17:11:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b7d38685c5b8d925a3e2afb4d9c376935eb06d4d6c9f20badfe7b7f26f09d6af7b827b567e1cf154c40b492e9c70f3c6c581cfe75f3515b7a330b7d684e01270d196c9417f1222f9bd094cc82fe0ad9b01a43ee9eba523e1810c67cd387abb4485fc2aa1d2d9657451cdaa45927dab2941ebdde8c4bbb0557fa3cdedaee72d7befcd1e9ff9c3ed54aa78ab61659259535e8090f78b8eb879acda4b97bae3f7726c1b351a2b1ad033e2a8a370e4499ea96dbf01937863cc878c7297fb4c745001e81b79c9443f7101d2e53d4b78b64ecb455296e70f", 0xd5}, {&(0x7f0000001500)="e7f04dc957ba2d132b3604c7b8f15987eb7d3c9df718be06caf13bbe3b3bf0211c30984d31911c8f6727ddb14c11eb9369049e77bbeb6f57b08483e6d0a469975ada2f3dc0298098b8d3e10f7e0423ed558bc0b8f4ed008122d08db6f42f216e92b4062394a91eab071ec0edb4531f27b9e6a88be2ebb0994a7d7d56141ffa9631fc571e94b64fce72715a2390802d5c15e7779d140c9f2aa14341b2e5b4d9678adf5894c8704526faa7569754197e2468589dae827ef434687b766cca30715590233993cbb2bd4f549b48ff7ade402ed12f2ccf4ba981479fab5368161cee08e24bddc37caac680b249efe990c0103fcaf846cd4f28480992e59e919cbba83a5353f3048b4512bccbdd91b1428d133af6594dac5cd74acc2088c6b6d0e44fe93543626dbf2f473cc127650afb60e8a1c21da0de87fa344a1b8414e80d3854e927cf35269e2983b539731d907f3d181547c1fcb09c677013e796f1072ba1b02b577f273f5ffd7a3df1d2dd4c944c246d562dffeea87aaeecf2f4708aa7cfc8e4babd910e159ac1686dd003430fed449e78e0b131e20b4aae7fdfbfc7c3b03a0c44ccdae7a6eabc1bac1d99c0ced7099d72d30ef505bc370ba8ca8fb5cd69d122551f2f228e95eec6ca32bdf57fec292e5fddec6874794dbff4928534a49dc0c13a38fd654a06ed0743ca4d26427c913fd68c91704028d3086c8f31b3a441168fe297e5f5b57ca438d6b08497558a0f53b3feb45996e599713c5bd41c3ffb07bf1541f00790534ab7e756a3f1d0a0183292d9b347b75dd8b5fcc3bbde6ec7e874145a19ed53d7fb1d66954d58287e3927ce651aaddcedf5c907cf5b2cf1f62c0005948a536bc97a9c49ec5ea9f985299ba9931c1e571d04452e2c901987856e409eee7a3080c40a1514cfa6bc9b936332e858344cf984f271ecf0b7d3e878849f79a81e725b62a4028160ef3dcce79d90970484cfd4a66bdeec39d48df0f0459b5178f7a29e23673f2a68b84309ec908b08fdaa110e3f2f39444888d11479825a2ab7fb801fc447c0304eb615b4d2fad6a9b2d61172e9308f4a857c33db1be31b1f2e215ae1864eceb0c32785cd23667ee880466874aab10cb44d1c4fc7c6e0a077ec92800b5434ed0c855b4ffb8029d9ef41113cb0119ae9633abfba0ebfa9fa7e709c2ff27dde8bfeebac4b9f7e07b26d5b2869169ce18e020426ea14d0b98c7ac169a6f3efa9c0a798819eb9053023595241e72bb6969b2510a22e8e486e5ede0c01db4d9f5ac56d94378b797027315e3ecd012bb40f259929b7b3f5f07c8b011d7ed3767d3a2be509813611008dcc607559bbd9cc758b9972681bdf7c12f40fbf43e3cc4fe45cb0ca8568da145e9bc85067a01c4c105a349bf25f13d2d14a48990cc0accfa79c0a478c97bf5918fb3bdbe8de8c6972c7a0f0167ac5eede3fa2839a7dfc2e05dcace4454b0ae4b855ef2e2426161891f7993f78f5ee9e45bb9e17a3d5fd63717b3e71429c3bf1f43f7d635507fa5813288091b9ffedbc416412eca75b429e18deb3b1610136a0ff7f860fe0dd58c5864a1a309f518db50ee94a5251dde6bad4b83e879c7b7524236d8b2f1b008b8c60e61c7cb5c099c1c545654a5ad13b766d7df1c80173cfa67b01379253b839265457892872a55361e43b8b782c20d926d275bbe782df322e174bf01bcb5bc16b4741fb4135732d3e019361ebc9c4845368bf77f71c61a00818bc882cdd9b01d094138940e30ded4955fc8a4381e76427622529da578ef37604b9a37de605459e41938dc11b751044f891a45a4e4440316cf3278f2de261637e764426526f24670cf1168071353b507f0acee7d0c34a7e58bb5f518381e27f294eb94929b1142c9cb5c4c7435716be4c1ff679e475cb4218447736a76dd1e792eb17e8fe1a45732d636330e43c1c19bc1eaea869c163a794360d42b66c75f334f66a90bac58897c788055bd6644255c49a5a1eaf2654c0796d6b77cbb141c29ab48776860be3d65fd1b8b183103279a0f971d4c2463517b15343357312245a145197b3e142bcbab4d479e1d297b0ebbb920d59c2be4b6a2ceeda7cdfef785d615be6a2d3f57a1aee8dcf1a26aaaa0f67f7c889072a3b5b9601a7c0cc5c7d147ab43a5844ac9c744dfc4ee18d4d7e700205d721505c837fca279d0ff82c769d105907fd152711b6bc056690ab0d5f74588e3588091fbe08c4bdbb9be94c4a99eb485b3587ed105bd88c5652b19653b3c972e7c509d581bbc9a6fd515e03b02eba88fbdf5770de3e09b8348db16d5cb027356eb166fa484a50da47a97bef20d56eab4dd3cf80daf59e2e758637a50bbbafd20e0d65b828f91305fa48f71255369542fdaf26aa7f68e9faff2577b86e8327ada12ed1c9a9fcb4138319b2b9b031f9270851b21a0bbb62cc84e28700c732445ea4e891c7fd9072f35c165d47bbd35846c1285a4d4bab51496a903d78b03da3c6a540740e6be898e056d18df55125109f891c41415190b31f291a661fbe6250052d67781ed36ee908e3d1c0bf7c96bbf221a37d11c8cac1c568d282266a77317245d0c1997a797534fc83f14b157730e0ba12230af0521b4dfe9ea9d695a095768bdc1dec1472800166aee0a50d586c6cefcecb4f74c24f576818c66e47a9c05ee2492498a14a323048627012d0db266b5bc1208a61553b665bb9dfb63fa0df3d921d961afe32b1fd80f90819243509681b38bf7ae4c4afd7cd3e9f0dd0a2568bbce124f1ec98ad6031a69249a0006e3e959f48163dd75f18436755cfd36c50a7cf721316c1a0f2700e3a4ffcf4fb29aeee5fad195ec419784e327aa09d806eb265714eaf0ec519bcc136417e3b4bf22a3c2c4c58e4caba5091dae1c06ff11f81734b62775802e4f6559d2c8a7ad2b4e7b90eaa35d8884363eab66871ab3729c84ce362c87cf4b99b4148c1fb83cbd2171518c53cb46907454f232e9b5b7d6ef869c23d5f668654c30dcafb26eb0f55d0ced089b960616ecfe3f4fc5f150f5d448e3f2a4ece3eeaec6660453c0c5802c85bf770354f5e4f98c0f36fcf8729695cf365e0de932513f602440529502be93a72190ba675d7bf084f31905ccceda7f02e250e4036ae6aac282b41503c8a2a516a1452032ff551e2eee213eff9c735dceffc9991608db2a7c1bf5776a442189d7a9ef2ed0b5fcf68f645df5bb8a3ce37bc5417d61271ca13c04644d0d632c36c628b1bcd18f7bf18e138eeaf0162f893590ef6f65499de3d6a449392f1681928d326656e32bbce68d8dd9ef4bcbe3059d04ad5a7c54b7c9f7948fd2345047eebf0a630ad73ce3e242b7ec0723827927858892730244d495e16dd197fc16b1cf715aa038eef19a67dde73e9ba893b15823846ee5d28496952a0a3b478f6d0027ee70b51f3198f0353bee886afb33dca48981c91ebafc4934c1cb23f8546b709236e1770d031af731195ab1b9acae6a274178f061f19f6d925b730d69eb4395a96bff97482038505d3c5ef9a88f9fde80c9a8facf44e622699445ef5e3ca2032919d1087fbe79cf30e60a0769717847fabbb11b8f11fbd5d4f61fe5f0391c10cea707bcffc9ac14997515f5315722dbd7f4e877d0766c557f0be74828eb06fa08e33a22433cdb4b121a5bf1367ff4210e89ae63c270f252bdca328da92efe56d1fb87e63346cdec3cad2f3e89ba4b3b6e35c3f553e728c8bff5a6dfdfcbe2b51cea5a4e10bfbde9ddb38f89d8871e0ed904377215c91d30ffc1b0afe638c3e23ce90e27cc7e66cac540808155faf1f984e6149d3cee8d22b459b80e40a7b8655df605e584655b609e36f4a4e9a02b4b073e6ac76d657857381db91d207a91fb77044a149668187c5bc1ab38febae117de8d6ea4843c0ee716b330a2ba6e1fcc544040bc4fb539efae78db42e7c0d347c26f77eee1a21fa93f55365cac6c200bff2c5c6b82ec8dec5ac81f15a2cf138b23a0f7ebc05aa056e72c392b0909f9d7e2894a08badfdb7a846d2d1637c56e64c908acd3485c0805b72e1fc36b8a917df8a878dd34887de8d222282849235bd1d2974d05476a636f2841116c4bfcd6820196f780d6d3632a46d38491dfe5eb6beabdc9c9a36a5d91b071fcc8a8ff08a09c0b6a9e554175f3be8dab9ffba22bd97f41966894112620c259c062c5a632e0a89f492f6479c26f657c45bf31c310dfeae69878f7d939e1520c088c90f061eacc51ee93b66f0fe0351f5c54b5b43bfa1efb733ff72afebda6560ce2b85bcb08f64f328dd61d2c4413054babadfe4ab445d6095f773c0e6ea1699cc3974331658eb3e674e20ca950b29a06e0094ad6574d781cbe6d124a1047ddd58900e654bcf71338400c08ab0d833615d1ba98d88aa19b74194d90f2451eca5c7b52e9c8978e9a012c81b22b48ebc1357934d3d29c39a9c3f7ef305e42dee208286155341a78da443ccee38efce43e3652b37ec8be86ea0ec8073338e2263e1bad8ce6eff45f24d01cf68ea56fbc1c732338ad10072a3a7f2d0f47a433cde11b44bee9f8fdc4f727c9bf520d62dde1984a1d00e1a1267c94ad169d4272551c4c157b14883dca4524b938a5c31794d185e113bf0f4aeef3d4046cc3900fa1e5cf329d79a668d32d233fae5df5b3fe26d752ddba555fef1adc7f6c534fd0adcb138c535663a8ba5bcb9dc4c2acaca5a61e8673b29e4893e97b53ea5a63d16e6ba7376a9b464d5b979cb316759e95d1e306c433e20e234a65b7bc7c1aefc1b0c3e8d04fda652ccae257c3ce877090bdea1d343c26319b06f688f2cea15b5a9e121dd1d564efc1b8861546d46d2cb91aee07bae774d067bb70b614977f4a66191d594f5cbd46ab47c0f2c997d2bdbd4f53445372eb4ba90d0bf818790e845c9dcbdfeebdda1b08bf9307b3b57d207655f61954781acbcb8511fc6f3412c125a3ef4dd436e392e3381dfd7b7079b79945e9ae2c0b668062eb840ed8138647738991aa2ed01c5f9b5659822955d2b75e9d5d75bad4b94315aa7995c750d47eb81dbe899cf91", 0xdec}], 0x2}}], 0x1, 0x0) [ 1533.532835][T16948] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x10, 0x0, &(0x7f0000000080)) 17:11:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002b01219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:53 executing program 0: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:53 executing program 5: syz_io_uring_complete(0x0) syz_io_uring_setup(0x5a36, &(0x7f0000000540), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 1533.690334][T16968] loop1: detected capacity change from 0 to 264192 [ 1533.700420][T16970] loop2: detected capacity change from 0 to 262160 17:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="13b91e1116b981170c4fb01d70cabe0a", 0x10}], 0x1, &(0x7f0000000200)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0) 17:11:53 executing program 0: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='bond0\x00'}) [ 1533.734389][T16968] EXT4-fs (loop1): bad geometry: block count 313524736 exceeds size of device (132096 blocks) 17:11:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002b11219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x894c, 0x0) 17:11:54 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:11:54 executing program 0: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='bond0\x00'}) [ 1533.817716][T16970] FAT-fs (loop2): invalid media value (0x00) [ 1533.833942][T16970] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:54 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffd}}, 0x0) [ 1533.915090][T16987] loop1: detected capacity change from 0 to 264192 17:11:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8954, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000056c0)) 17:11:54 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1533.962068][T16987] EXT4-fs (loop1): bad geometry: block count 313590272 exceeds size of device (132096 blocks) [ 1533.991147][T16993] loop2: detected capacity change from 0 to 262160 17:11:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002b21219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:54 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8081, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:11:54 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 17:11:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="85", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 17:11:54 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1534.113675][T17003] loop1: detected capacity change from 0 to 264192 [ 1534.118169][T16993] FAT-fs (loop2): invalid media value (0x00) [ 1534.129751][T16993] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000000)={'batadv_slave_0\x00'}) 17:11:54 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 1534.160880][T17003] EXT4-fs (loop1): bad geometry: block count 313655808 exceeds size of device (132096 blocks) [ 1534.169164][T17010] random: crng reseeded on system resumption 17:11:54 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:54 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001f19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:54 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 17:11:54 executing program 4: socket(0x0, 0xa, 0x3) 17:11:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 17:11:54 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:54 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', 0x0}) [ 1534.366180][T17026] loop1: detected capacity change from 0 to 264192 [ 1534.370116][T17025] loop2: detected capacity change from 0 to 262160 17:11:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) 17:11:54 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1534.410586][T17026] EXT4-fs (loop1): bad geometry: block count 520094208 exceeds size of device (132096 blocks) 17:11:54 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 17:11:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002002019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1534.478450][T17025] FAT-fs (loop2): invalid media value (0x00) [ 1534.546896][T17025] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1534.577194][T17043] loop1: detected capacity change from 0 to 264192 17:11:54 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:54 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:54 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/112, 0x70) 17:11:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a1fbfc1c66130552a549dfb4b0659e51459e671c3daa8bb2d758a999b460ccee54569f07bf05f7688c5ec14758db49d41d97e0bbb5d42e2d4cca128aa1f1e495c77af5aa74c9d4ada262e49fb0c7eccabdb5009a393941c795a0219ab45fae45b98cc68fbb1ddf35e557a67672f4fd265b8bf7cb1b51889ec7d5939e7b88f8f6ec4915cc0a6da947f330014f0d1e6ae22a7d5c70ee779786f800030d10c904ee04353c74211a4bd3c40502ea96db80c46d04f0c199089bbb6001f5febe58d41ebe3b2bb3bd5ed7edb230ddbce10605f2bb75a96e6756578a13f7eb9d9209ba8eb70112c755c398a9e7c92874a35fbe449437dbcc2b895374051e05fefcc45e7b"}, r1}}, 0x128) 17:11:54 executing program 3: syz_emit_ethernet(0xf2, &(0x7f0000000140)=ANY=[@ANYBLOB="ff"], 0x0) 17:11:54 executing program 5: socket(0x2, 0x5, 0x7fffffff) 17:11:54 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:54 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 1534.676772][T17043] EXT4-fs (loop1): bad geometry: block count 536871424 exceeds size of device (132096 blocks) 17:11:54 executing program 3: syz_read_part_table(0x1f, 0x0, &(0x7f0000000000)) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) [ 1534.734108][T17053] loop2: detected capacity change from 0 to 262160 17:11:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002032019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x6eab3a7f3a16c7bd, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) 17:11:55 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1534.790930][T17053] FAT-fs (loop2): invalid media value (0x00) [ 1534.796980][T17053] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:55 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108907, 0x0) 17:11:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@ip_ttl={{0x14}}, @ip_ttl={{0x30}}], 0x30}, 0x0) [ 1534.896510][T17070] loop1: detected capacity change from 0 to 264192 17:11:55 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1534.931432][ T27] audit: type=1804 audit(1656177115.134:1410): pid=17071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir732672101/syzkaller.Hr2x6f/3242/bus" dev="sda1" ino=1161 res=1 errno=0 [ 1534.978367][T17070] EXT4-fs (loop1): bad geometry: block count 537068032 exceeds size of device (132096 blocks) 17:11:55 executing program 3: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xa3}, 0x0) [ 1534.991130][T17075] loop2: detected capacity change from 0 to 262160 17:11:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name, 0x10, 0x0}, 0x0) [ 1535.018402][T17075] FAT-fs (loop2): invalid media value (0x00) [ 1535.033615][T17075] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x0) [ 1535.050270][ T27] audit: type=1800 audit(1656177115.134:1411): pid=17071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1161 res=0 errno=0 17:11:56 executing program 4: syz_io_uring_setup(0x1058, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000) 17:11:56 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x40) 17:11:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002102019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:56 executing program 5: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/68) 17:11:56 executing program 3: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 17:11:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x1a, 0x0, &(0x7f0000000080)) [ 1536.163208][T17093] loop2: detected capacity change from 0 to 262160 [ 1536.168628][T17094] loop1: detected capacity change from 0 to 264192 17:11:56 executing program 3: syz_io_uring_setup(0x2ccf, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0xfffffc01) 17:11:56 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x40) [ 1536.213569][T17094] EXT4-fs (loop1): bad geometry: block count 537920000 exceeds size of device (132096 blocks) [ 1536.234667][T17093] FAT-fs (loop2): invalid media value (0x00) 17:11:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) [ 1536.257695][T17093] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:56 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x40) 17:11:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002012519000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:56 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) 17:11:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @dev}}}, 0x90) 17:11:56 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @xdp, @l2={0x1f, 0x0, @fixed}, @phonet}) 17:11:56 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1536.394001][T17111] loop1: detected capacity change from 0 to 264192 [ 1536.409866][T17109] loop2: detected capacity change from 0 to 262160 [ 1536.415723][ T2968] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:11:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) 17:11:56 executing program 3: syz_emit_ethernet(0xf2, 0x0, 0x0) 17:11:56 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) ftruncate(r2, 0x2006fff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, r1, 0x0, 0x201000) [ 1536.456656][T17111] EXT4-fs (loop1): bad geometry: block count 620823040 exceeds size of device (132096 blocks) [ 1536.462760][ T2968] Buffer I/O error on dev loop2, logical block 0, async page read 17:11:56 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1536.518665][ T2968] loop2: unable to read partition table [ 1536.534351][T17109] FAT-fs (loop2): bogus number of FAT sectors 17:11:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 17:11:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002002619000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1536.558926][T17109] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1536.565955][ T27] audit: type=1804 audit(1656177116.754:1412): pid=17126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir732672101/syzkaller.Hr2x6f/3246/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1536.614293][ T27] audit: type=1804 audit(1656177116.754:1413): pid=17126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir732672101/syzkaller.Hr2x6f/3246/bus" dev="sda1" ino=1174 res=1 errno=0 [ 1536.651826][T17132] loop1: detected capacity change from 0 to 264192 17:11:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x4b, 0x0, &(0x7f0000000080)) 17:11:56 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1536.683058][T17132] EXT4-fs (loop1): bad geometry: block count 637534720 exceeds size of device (132096 blocks) 17:11:56 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9}]}) 17:11:57 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') 17:11:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002023319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) [ 1536.791154][T17140] loop2: detected capacity change from 0 to 262160 17:11:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x31, 0x0, &(0x7f0000000080)) [ 1536.850689][T17140] FAT-fs (loop2): bogus number of FAT sectors [ 1536.865779][T17140] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1536.876930][T17147] loop1: detected capacity change from 0 to 264192 [ 1536.913326][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1536.932172][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1536.978621][ T6566] loop1: unable to read partition table [ 1536.988259][T17147] EXT4-fs (loop1): bad geometry: block count 855769600 exceeds size of device (132096 blocks) 17:11:57 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) ftruncate(r2, 0x2006fff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, r1, 0x0, 0x201000) 17:11:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x2b, 0x0, &(0x7f0000000080)) 17:11:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 17:11:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002023519000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name, 0x10, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:57 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) ftruncate(r2, 0x2006fff) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, r1, 0x0, 0x201000) [ 1537.330744][T17161] loop2: detected capacity change from 0 to 262160 [ 1537.330784][T17155] loop1: detected capacity change from 0 to 264192 [ 1537.343949][T17160] sctp: [Deprecated]: syz-executor.5 (pid 17160) Use of int in max_burst socket option. [ 1537.343949][T17160] Use struct sctp_assoc_value instead [ 1537.416800][T17155] EXT4-fs (loop1): bad geometry: block count 889324032 exceeds size of device (132096 blocks) [ 1537.417495][T17161] FAT-fs (loop2): bogus number of FAT sectors [ 1537.454749][ T27] audit: type=1804 audit(1656177117.654:1414): pid=17164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4013437082/syzkaller.gIDCt5/3289/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1537.515031][ T27] audit: type=1804 audit(1656177117.694:1415): pid=17164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4013437082/syzkaller.gIDCt5/3289/bus" dev="sda1" ino=1179 res=1 errno=0 [ 1537.516689][T17161] FAT-fs (loop2): Can't find a valid FAT filesystem 17:11:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x40) 17:11:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="b7", 0x1}], 0x1, &(0x7f0000001940)=ANY=[], 0x140}}], 0x1, 0x0) 17:11:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002003f19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1537.540905][ T27] audit: type=1804 audit(1656177117.694:1416): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir732672101/syzkaller.Hr2x6f/3247/bus" dev="sda1" ino=1180 res=1 errno=0 17:11:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) [ 1537.659534][ T27] audit: type=1804 audit(1656177117.714:1417): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir732672101/syzkaller.Hr2x6f/3247/bus" dev="sda1" ino=1180 res=1 errno=0 [ 1537.713629][T17174] loop1: detected capacity change from 0 to 264192 [ 1537.732230][T17174] EXT4-fs (loop1): bad geometry: block count 1056965120 exceeds size of device (132096 blocks) [ 1537.795057][T30949] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:11:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000140)) 17:11:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1da8}}, 0x0) 17:11:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='pimreg0\x00'}) 17:11:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 17:11:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) 17:11:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) [ 1538.101994][T17182] loop2: detected capacity change from 0 to 262160 [ 1538.136345][T17185] loop1: detected capacity change from 0 to 264192 17:11:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) 17:11:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) 17:11:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 17:11:58 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xe202, 0x0) [ 1538.216088][T17185] EXT4-fs (loop1): bad geometry: block count 1073742336 exceeds size of device (132096 blocks) 17:11:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 17:11:58 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x10, r0, 0x8000000) [ 1538.296843][T17195] loop2: detected capacity change from 0 to 262160 17:11:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000280), 0xfffffffffffffe26, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED, @BATADV_ATTR_ISOLATION_MARK={0x29}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}}, 0x0) 17:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) [ 1538.358432][ T6566] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1538.378993][ T6566] Buffer I/O error on dev loop2, logical block 0, async page read 17:11:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_ttl={{0xfffffffffffffea1}}, @ip_tos_int, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0x60}, 0x0) 17:11:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) 17:11:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x30) [ 1538.415886][ T6566] loop2: unable to read partition table [ 1538.447825][T17206] loop1: detected capacity change from 0 to 264192 [ 1538.453441][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:11:58 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 17:11:58 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xffffff31, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2800}, 0x8010) read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/203, 0xcb) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x2001, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 17:11:58 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000002d80)=""/87) [ 1538.518926][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1538.550826][ T2968] loop1: unable to read partition table 17:11:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x30) 17:11:58 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) 17:11:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108906, 0x0) [ 1538.575385][T17206] EXT4-fs (loop1): bad geometry: block count 1107296768 exceeds size of device (132096 blocks) [ 1538.592395][T17220] random: crng reseeded on system resumption 17:11:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004619000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1538.658510][T17226] loop2: detected capacity change from 0 to 262160 [ 1538.689103][ T6566] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:11:58 executing program 4: setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x4008004) sendmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002640)=[{0x0}, {0x0}, {&(0x7f0000002400)="de1fec759f6acc2d9b1048d02a148cbc0c0436387437e7fb61a0112d9b5c2e557add7bf3a8ae43d50a4df0924cc0705c50edc0e9d8ac4ad44fce4de4a89522bac6820babb174e5d342c9e58f4f", 0x4d}, {&(0x7f0000002500)="43c0ffaf1af023da2f616cd36a965e30a64d038372c0ac8fe1b772ff4d895d7c1b17a4d72785f21cbeaf7dbb0aedad01ed6bc0055339438ab8f6eef17f69dcdcf1597f3c8ae264f2c212023e58c10b719dd3801a6e0c34e1698ec8d228f8c338a6aa378a160a8035dfe3ea6211b614ec2b31775cf8d2d21d3c0f", 0x7a}], 0x4}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000002b40)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 17:11:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={0x77359400}, 0x10) [ 1538.717848][ T6566] Buffer I/O error on dev loop2, logical block 0, async page read [ 1538.757844][ T6566] loop2: unable to read partition table 17:11:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 17:11:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vlan1\x00'}) 17:11:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x30) 17:11:59 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) [ 1538.783748][T17233] loop1: detected capacity change from 0 to 264192 [ 1538.820530][T17233] EXT4-fs (loop1): bad geometry: block count 1174405632 exceeds size of device (132096 blocks) 17:11:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x401c5820, 0x0) 17:11:59 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) 17:11:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 17:11:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004819000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17:11:59 executing program 4: select(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x8}, &(0x7f0000000200)={0x0, 0xea60}) [ 1538.951995][T17246] loop2: detected capacity change from 0 to 262160 17:11:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x30) 17:11:59 executing program 5: openat$snapshot(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, 0x0}, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x2001, 0x0) 17:11:59 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4440, 0x0) 17:11:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r1, 0x213, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x30}}, 0x0) [ 1539.041582][T17254] loop1: detected capacity change from 0 to 264192 [ 1539.075658][T17254] EXT4-fs (loop1): bad geometry: block count 1207960064 exceeds size of device (132096 blocks) 17:11:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"555a595992bca92793fdf6552f31938a"}}, @in6={0xa, 0x0, 0x0, @empty}}}, 0x118) 17:11:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)="e700e675638293b2e30369691fc701866788d06a417625e1f5c5c0d1e743e9a72fd11d69c0", 0x25}, 0x40) 17:11:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004a19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1539.112471][T17262] loop2: detected capacity change from 0 to 262160 [ 1539.140789][T17264] random: crng reseeded on system resumption 17:11:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) 17:11:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x30}}, 0x0) 17:11:59 executing program 0: sendto(0xffffffffffffffff, 0x0, 0x0, 0x4004814, 0x0, 0x0) syz_io_uring_complete(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1539.248371][T17273] loop1: detected capacity change from 0 to 264192 [ 1539.278793][T17276] loop2: detected capacity change from 0 to 262160 17:11:59 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast1}}) [ 1539.290322][T17273] EXT4-fs (loop1): bad geometry: block count 1241514496 exceeds size of device (132096 blocks) 17:11:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x0, @empty}], 0x20) 17:11:59 executing program 4: socket$inet_udp(0x10, 0x2, 0x0) 17:11:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 17:11:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"3853175813c0ab392c7c0dd559e66639"}}}}, 0xa0) 17:11:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) 17:11:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004c19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0x30, 0x0, &(0x7f0000000080)) 17:11:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1539.454947][T17286] loop1: detected capacity change from 0 to 264192 17:11:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) 17:11:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80) 17:11:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0, 0x6, 0x0, 0x4c5c}]}) 17:11:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000008b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000008c40)={0x0, 0x0, &(0x7f0000008c00)={&(0x7f0000008b80)={0x28, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}]}]}, 0x28}}, 0x0) [ 1539.498566][T17294] loop2: detected capacity change from 0 to 262160 [ 1539.519503][T17286] EXT4-fs (loop1): bad geometry: block count 1275068928 exceeds size of device (132096 blocks) 17:11:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) 17:11:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:11:59 executing program 3: io_setup(0x62df, &(0x7f0000000240)) io_submit(0x0, 0x0, 0x0) 17:11:59 executing program 0: socket$inet_udp(0x2, 0x2, 0x6) 17:11:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) 17:11:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r0) [ 1539.694740][T17308] loop1: detected capacity change from 0 to 264192 [ 1539.731483][T17316] loop2: detected capacity change from 0 to 262160 17:11:59 executing program 5: r0 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 17:12:00 executing program 4: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1800) [ 1539.763446][T17308] EXT4-fs (loop1): bad geometry: block count 1610613248 exceeds size of device (132096 blocks) 17:12:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) 17:12:00 executing program 3: geteuid() syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) 17:12:00 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x3, r1, 0x0) 17:12:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002016519000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:00 executing program 4: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040000) 17:12:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) [ 1539.930658][T17328] loop2: detected capacity change from 0 to 262160 17:12:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 17:12:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 17:12:00 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 2', 0x14) 17:12:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8924, &(0x7f00000003c0)={'wg2\x00'}) [ 1540.035407][T17334] loop1: detected capacity change from 0 to 264192 [ 1540.067646][T17340] loop2: detected capacity change from 0 to 262160 [ 1540.069840][ T2968] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000004f9"], 0x24}}, 0x0) 17:12:00 executing program 3: pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, 0x0) 17:12:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"3d40d92c89753569adc409b5884d180b"}}}}, 0x90) [ 1540.086344][T17334] EXT4-fs (loop1): bad geometry: block count 1694564864 exceeds size of device (132096 blocks) [ 1540.115456][ T2968] Buffer I/O error on dev loop2, logical block 0, async page read 17:12:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x60, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x60}}, 0x0) [ 1540.133758][ T2968] loop2: unable to read partition table 17:12:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006819000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) 17:12:00 executing program 0: r0 = memfd_secret(0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 17:12:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) [ 1540.184573][T17346] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 17:12:00 executing program 5: syz_open_dev$dri(&(0x7f0000000780), 0x6, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) 17:12:00 executing program 4: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000a00)=""/8) 17:12:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a2, &(0x7f00000003c0)={'wg2\x00'}) [ 1540.271163][T17354] loop1: detected capacity change from 0 to 264192 [ 1540.291712][T17356] loop2: detected capacity change from 0 to 262160 17:12:00 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000100)=0x1000000, 0x4) 17:12:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:00 executing program 5: r0 = socket(0x1, 0x5, 0x0) getpeername$tipc(r0, 0x0, 0x0) [ 1540.323197][ T2968] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.342406][T17354] EXT4-fs (loop1): bad geometry: block count 1744830976 exceeds size of device (132096 blocks) [ 1540.361312][ T2968] Buffer I/O error on dev loop2, logical block 0, async page read 17:12:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) [ 1540.376992][ T2968] loop2: unable to read partition table 17:12:00 executing program 2: keyctl$unlink(0x19, 0x0, 0x0) 17:12:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002026919000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:00 executing program 0: keyctl$unlink(0x16, 0x0, 0x0) 17:12:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x3, r1, 0x0) 17:12:00 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x141900) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0}) 17:12:00 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x15, r1, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r1) [ 1540.552339][T17379] loop1: detected capacity change from 0 to 264192 [ 1540.581289][T17379] EXT4-fs (loop1): bad geometry: block count 1761739264 exceeds size of device (132096 blocks) 17:12:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006c19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:00 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) modify_ldt$write2(0x11, &(0x7f00000007c0), 0x10) 17:12:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x3, r1, 0x0) [ 1540.682881][T17391] loop1: detected capacity change from 0 to 264192 [ 1540.712943][T17391] EXT4-fs (loop1): bad geometry: block count 1811939840 exceeds size of device (132096 blocks) 17:12:01 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8913, &(0x7f00000003c0)={'wg2\x00'}) 17:12:01 executing program 2: modify_ldt$write2(0x11, &(0x7f0000000000)={0x4ed, 0x0, 0xffffffffffffbfff, 0x0, 0x0, 0x1}, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 17:12:01 executing program 0: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 17:12:01 executing program 3: r0 = socket(0x18, 0x800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 17:12:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002007419000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b3672fc8b546a1b5f09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f290a301a50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70050000000000000001b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d34d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e373707b42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c046aec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000640), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 17:12:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x0}]}]}, 0x20}}, 0x0) 17:12:01 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0xb, r1, 0x0) [ 1541.448052][T17401] loop1: detected capacity change from 0 to 264192 [ 1541.478424][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.540400][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:01 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9205, 0x0) [ 1541.616011][ T6566] loop1: unable to read partition table 17:12:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002007a19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1541.677283][T17401] EXT4-fs (loop1): bad geometry: block count 1946157568 exceeds size of device (132096 blocks) [ 1541.891143][T17427] loop1: detected capacity change from 0 to 264192 [ 1541.904769][T17427] EXT4-fs (loop1): bad geometry: block count 2046820864 exceeds size of device (132096 blocks) 17:12:02 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x1e, r1, 0x0) 17:12:02 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="17000000", @ANYRES16=r0, @ANYBLOB="0100603ed606a000000004"], 0x1c}}, 0x0) 17:12:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) 17:12:02 executing program 5: r0 = socket(0x1, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id, 0x10) 17:12:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002df8019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:02 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="915d04bc7f60af1f35220fb90169762abce409aeef201e22a861fef8001d7b8a5f9de8634bcc6efe11f49a62015a6bc64e4ea48cb9d556886473fbb5eca70f20de821c25ad1ee0d9e5614f8ba13baec2881e30ba818a607b451afa30591a525eafe8b60760efecb5c7e6b89e95c7c492bcc0b681f43f6e72fc42a8193c21af493a5836dea3f5a44e329162ef5f5b676c9135e6a69d171c411c2e6d082b8b743dfd9c680e172edb3f1dec4410bf72e843b8a074251d308c364687e28b3e1aa8d0234d3828d08dec115e0c07e59f6766046d9cc7e0074e4fada16dc2fa7882e478d45d6fbb5bb22a531774b8b1c9cf75107d8ab553ffb3935b7fcb34a2d8843c999c95a0d4100b2744e990d7a03b637d3519b06e86fb4f82ff749b6703e652d2d3d8eea63ecf7ad3c48e3da498249c94516344c3fe4f081a43273d823262d52f7ddc4717b9c75c5389cc1be9744686c8b2160a12d547f5e22083c3b0cc089619c5d59543fb94d0fc67db712d77da5d5e98eb3c8cb4705aa96e4038f171eda9e1ebc66ba14011f68886f23f99507aaa49368457de000d4c2c4f5935b2a918f27637686210b3e16d8973d0a2a2459ee179d703eeebaabaa293e3a6fed722bd0693b6655f39e84d2c629e3a99688e4eaa5d2109b292b201fe684f31dfdc31b1c24161b2e4a44e2349a4d2df75ab5c552a21bddf6e13fbc10fed9232d3865ffc22df1569ace9733da69a48d6c983ffe60975e4cdd0f9e675cc344ffb05ac4e28033b87b6c232782148caddd460d40867d29224e03314baad72b442315175e10497a8060f77d134900a7190ab0ea8cb1d76cfd55d65a381d9aea7d888ba4cc3cfcc08590f1bc79135f6151842937cb1367fc1d6aade43321bb3f3a5c9d9692d9556e7be35d3a0d880de58bb63db9af2cb58702f396af85b15677fedf9eef485f78acb27b8a07c8c1eee2611b1a9c054e5c7b5ff55981c923e42e9ce8dcad2fb5ff04029c0baf54c9aa7575aca5f9c6dea82994f771be02d28bb9e5ee0e2b2a5b0fdf497793f9135a7a54c9be194cf3b8c182fd296988b41653f8bc0004c7dd7e7c9671e59487d2a2a9d4f0b7e76e345d2e46598b5ddd106a4c9dce1cfb954c21a8fd9993105f8ca7361dd935c03eb4cb68f07a9247da33ac770f56c4b965b4d8a4b4a668150ee706dd8c6ccb6e9033eb07aa72690c4cad1e72466f05bdfb0815059106b6afd39b38d00f390695f5b88264d02210a7ea2c3e0b8f689b3aa97630409539ac4511d12adef7881e26d728dc929a74b02f9d2efe19b217ff8e50dfdc8fbd54c765123c0b769f04b09e3623b0bbf3de132ca76c382010eaad46176c8ebff8d8b949894b1633aa9c43fbb42ad58be882b664d6e66a643159892bbd18917cb6d5fbb185bf223b042919d79322d4ff93478ef573f9e82d3f5a6d0933ee82e03509734a74c6dafefb25c62a2911bb861a16b0d44f238cdbd80f6095699a14c659acaf7efc61e320767177a3748a36d77b0e24bc4b8fac8dbb10f7338349c0ef7f0b98dc9cbc6836b43d4e1f6f3b077ac092ad5954bb0805b6bf8a03d49ff60908f11d27a380777816d3db9dfdf978ac53dde3c64e3af80c150ef9616ae848b62d5b8e33cf6c30bab96cae987b2fe35962d33cdd90bca856231a9d2584e7725722fb7c2d32e63fa522bcd8ea1b12b7497d132b119d2fd6f5e41790555a6320714194dfdfa5babba9719503d5113ac48acd53769d7cbb06456e0739ea9e8d803407cbeff0625ef44feff79742dad9de187faa7cab3747159a29e3c7f92ff2ab81b21ec196be45d8ca8e4a64f90e723afe402a530513a8aaf98be4026359ef10cf88a622503908cdf24174a56a5c48324e6b411e6d81ceedad16548fa2ddcf8a1610f2a22ddf95f9f157692a34274c1b53dca8752190a31060f2c43205ecdda7adfca627352c0764dcf66ea6f84831be3c62845efa381ddd153633cf60da1f926645f6fe4352e57105e54acf282626513920bfa358777bd340117e16145d53c4a80fdae83bc4978a24b2ee892d596fff1cd98c07c8ca51588604287ad3f22018584033b30ebcd5ffd62efabd961ddcd80093523cb9fbd3c64b020cdfbd4b517b59b479a8986ea799fdcd7c2e01037b201ab8b7fb8d2f6078b667ef75e812a7699b7d371f8ee742bda4aeea71fe2ce0be9f5fd53b78f2f665e9b52b908c559d2233d6f963ec5039dc4595dfefb69e2f7af9423f0af946937d0f5bdaa06282edb4e92456f2a42ca409e1c6203c22c5b2cf2d5dafe81617b7b3395bb4725e22aa3c506d5fe2e9e86ba21b86b8ee6b27a853b1c4ad8a7658a8d33cec66f400926cf817d901f34b5c2b4e4396bdd743eb10e71d747aa339c2ff732c26dc8e5271e705d044c98c3014dfa2977d5f9d754f54ce853abd343cf6dcad30e44cf25dcd4f78f81df6a3bb4931c97f59dfb678cd6adc7c36240a0139a4e214d5285c187e5682f56c21960c162c9e7fa7a0955add3eaaee2cf147394516fdbd186aa1a2f885c2531624d53e635f059b7330c990fad9e0d6aea858acaebe38a1cc4f3fcc615d61f0342fa4e133be9fd78eb900a1b71a17ff875d96e0a7567f4a4ccfba7e341e5372b5323f7d583ad35cf6e31d7b4c51062493910239eb323e23d58e296c157134813c2f36a66bf0824183b0ad70d05da87c8ab065069283553dff892c385a3867dc67e70db38f26ab24a191d14058c4ab5358f77f750a39c854a81650a51375370800169882dfbcf0ca954110a5ae9d4ad278b9fb2ce33530955baf658a52f702cb3b61e260445ba9a39f8b453a8f8b7bdb7c6ce0ebd926570fa3294080886fd1126324775ce6aabac75f9450723edf8fb3b50f7a0d77f96caffdcdb4e2ae91d6bac9052d1bd0df4bb0ab91980b12e792abdf2dedaf8fcbe509b3ee04cbb10322311a61a70582ae84679c79d54da9495e055260d9a0b4fa0991d46e665bf33263cc792fe5f58831444cc67ac0bde964391c3ab0cf5eddc0f14b4c7ccb3022a5fc736ba31fe98ca8e6ed0e478c464cd41084567798399cc1ea377d144d030e02917f75feacb5306ed8fb0def3fba67c521ba1b72e04446fc35f6ff51f4543e1dbddfba5b9b9c29042b9e84e4492667e29284a7f83cb03a92f65c7f17af335fdaeda8326ba3d3888540c75e4a0a9d22a6a8c778b5d84b191788960a939bd797879354ed7fb83d071769edbd8a6d2ba17f7d559d166e3a5c69d6d193edf6c26944afc47d313f9eed2a80da0f8b4304477d270167fd4223e87e102ffd9dff554a8befb09272d936d1494b3ee96a56d2268d8f58551462e0aa74b3699ff89243a42c3eca26f86cffcd5379b13279b9439aae2090cdb0693b1c85fe6cb7682dc943bbb74f311fef32bdd36c647c160dc60a038c9b1bb45fce97c54aa32c4e13ed93aed444b40b58cbf83ca978f08db6042d260228cd0cdf440bbfb925bac85d73d8bb47e6fc5ae0488f1a593cda1cdd30a534325160bc9586de6737f12cae406e979c63deb3ee9e98b0ccd47a0d2c887f80f857786897623666ddc340507a7254c59a8310be76696771b44c3a27dbd3e49c42dafc4c5cf4b276df7c12040e3f8090d8877d6c35993df75d247c12a483956fb417187e685e12d42dbfdc89751595fb5a3862635a5d968f9221bfab32d87ed0c6576c2d736ea25d3848ee5839faef3207afe27cdc71598b653c12fde07ad12323dff3c9a105e4e939f3677ef76c57e56158e9a5eadc4a0a5836aa0e4f7340b0e657967d2ebf6efe92ed104280d1ced92c44970cb2b9e26d2c3ce72cf19bbd26f1a436b59dac1dc5f1ce7dd766d9b94690f27b58b3026785500c7fa08b8646e801d77297bbb9ce098055a5a9954cffe6a1b7adf48096123fb5444648a8e48d32a820ba465c183b6a9af4418e5a2f96722277cd67054ca2a54fd8d12f9024ea29f744ae83aecab053a7ab4b9c2c2011f25a129547e7f91dc6927df0f64d249763336d2f65a8e5d3c0eda99383b1d7e3604d6c5984224be6a814f51e169402484ca421b1284b9566be08282c43371a6006642b44dbd5b065c9c7160678c5659c6eaf5d3cf8db06cdb36236dff0f4a2e415c2f85d25093fe30f6a1402f2b1fbb3d51c72c0e6e81eb4c82a883437fd94bddc9096ea09565590a839d1d68aa953084c5874a9bb7f9364571085ccefcf453fe965bbcb2f228d79613fa300f780aa64576721b03bb1ee1eed83bcb3e7de44c9f2af51089286ee679165e4d1bbb75b4703634cc352544f3de77a6870845c96883c16ecd4b5af2800680403f4cf445e4cbc844b34ca365958525e6583998d140da561ee30f963e759cabcd47558696cd55634ab8341ed7ec7750e939aaf36abcc23c702110e043196909557b6c01c3168dbc7c5d4e0f658b2c47b65458898f8d7d2dfb4e03791a3072afa425008272ba6b2e1506791d088274535d91a14a8460674e62cb9628208fe1ae7ee5984848a12a82ceb76c5832c1410cf469d780857e70e0d7ed62b447e9e56e9da3367007c658433fcb45d7808a2c8f1283a107598950ffc3af1762cd92ec9932383ad5a906863c959857c350766a36497220853e88fd5b050c7ab080bf877242dcaf35b1f05a05a35de2741e5ed0a8e8637629d862473480a49861c46bc5a146195722019bd79e04d927261ccee023681db5ba8fd94edbeff93f7cc9deeb85ede161f1fd3fc0f7ce485fcb331e0da20528e1aa56943870dd2a003e80fae8cc944dc4393c3de645481586d263fac3194e6e600ffb2b39b43852cea3d98fdf29d5c94d5bd7312cf177e388ef24206bec635ee8c38391e00c576a85f9aee5ec9b336cf57493fa939d21582625865d9ebc47b721b6c67fa5014866f990169d42905dd5d218a40a49b2fbe9721c0bb2ca68f161d7a717072d9af78d88a0dddc269df0790ff7611f7346d2923cc7cea9c9100632478504ea63b6c268e8ebc2806d0c77799e40407bd9c488137bfb9ccc412ff5855b88818eb9637344f247cd28e26ec6500d0c595c28ce7e1b5c92970addcdfd14154c760032335bb7cb4ffdb2e1da547796c061d550c0f6f2b55d5db8b627502b5e453e9c69b6075770cdb1ac356cf021e4575fc7cb6c3d135045315e728f539d938da1c0ff5513946f78536a7b03599b62a6f4c6f37d6884f533395eb5c6810f611e9bb1884bd5877ac665c1cb3834b9e47e91d8f52bc48b895ce62635d5d4de606030563704be3139693fef66f337b4b8e4cd533b225e96755f1c43e4f9e5b55e61a522374401fe638c4d7d626f8ef1e34962833543a170aa91235230842f91c49457c96ed51269bb5d57b05747f69f7a8f262e6d316d2ec11bac038d61754ef923bfb15cb1b2eac7c2e5813aded32cf6634fdad1f92fb91b72d2f9b8f5f267586795aa5ceb7e967e292584a3100537eabf52fc3cc8ccb27a1cc668e92b4c74fdd4495e3155cc70a3351ce52af803ff61103598a20c13eacc8e2c82551ecf674bbcbaa6fc4c10d57414b0f7ffb8a9aabf9529795e032e3aba8b47338ee3210e56f27f42a2e276a701bf1124e3a2a7e2015e5e5ba857933452ade57364d16015643b13c948d355c5ca0956cff2c92398179c9e169b7f1945049d640209b56198c3b30f060873742c3a4eeffb6cbac232103693d213af2789ee87acb869c6cd76b567db43908dae266959760fed64f02505588feb668f2e388e41baf56c9fff1755400fcc30b59767bfd8b8ef93ea3748669e2d0864589b2407d275afea2b3faad40e6b7c75c986b75af94e", 0x1000, r0) [ 1542.667768][T17435] loop1: detected capacity change from 0 to 264192 [ 1542.722899][T17438] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1542.738344][T17435] EXT4-fs (loop1): bad geometry: block count 2162098688 exceeds size of device (132096 blocks) 17:12:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f00000001c0)="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", 0x5c9, r0) 17:12:03 executing program 2: r0 = socket(0x1, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 17:12:03 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000880)={0x0}) 17:12:03 executing program 5: semtimedop(0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) 17:12:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002f08019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:03 executing program 3: r0 = memfd_secret(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r1, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 17:12:03 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getpeername$qrtr(r0, 0x0, 0x0) 17:12:03 executing program 5: keyctl$unlink(0x17, 0x0, 0x0) 17:12:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0xb, r1, 0x0) 17:12:03 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1542.950342][T17453] loop1: detected capacity change from 0 to 264192 17:12:03 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) [ 1542.993495][T17453] EXT4-fs (loop1): bad geometry: block count 2163212800 exceeds size of device (132096 blocks) [ 1543.062467][T17463] QAT: failed to copy from user cfg_data. 17:12:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:03 executing program 3: mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4026032, 0xffffffffffffffff, 0x0) 17:12:03 executing program 2: syz_open_dev$sg(&(0x7f0000002640), 0x0, 0x1854c0) 17:12:03 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 17:12:03 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0xfffffffffffff000, 0x0, 0x10, r0, 0x0) 17:12:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002f98019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:04 executing program 3: unshare(0x2a000480) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 17:12:04 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 17:12:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8927, &(0x7f00000003c0)={'wg2\x00'}) 17:12:04 executing program 2: keyctl$unlink(0x8, 0x0, 0x0) [ 1543.788113][T17476] loop1: detected capacity change from 0 to 264192 [ 1543.859571][T17476] EXT4-fs (loop1): bad geometry: block count 2163802624 exceeds size of device (132096 blocks) 17:12:04 executing program 5: r0 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 17:12:04 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000340)) 17:12:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x3c}]}, 0x1c}}, 0x0) 17:12:04 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1004, 0x0, 0x19052, r0, 0x0) 17:12:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x15, r1, 0x0) 17:12:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002fe8019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8922, &(0x7f00000003c0)={'wg2\x00'}) 17:12:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x2, r1, 0x0) 17:12:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8910, &(0x7f00000003c0)={'wg2\x00'}) 17:12:04 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x19052, r0, 0x0) [ 1544.714175][T17502] loop1: detected capacity change from 0 to 264192 17:12:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8901, &(0x7f00000003c0)={'wg2\x00'}) 17:12:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 1544.765610][T17502] EXT4-fs (loop1): bad geometry: block count 2164130304 exceeds size of device (132096 blocks) [ 1544.801055][T17509] netlink: 'syz-executor.0': attribute type 60 has an invalid length. 17:12:05 executing program 4: r0 = memfd_secret(0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 17:12:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0xc0109207, &(0x7f0000000200)={0x0, 0x0}) 17:12:05 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={0x0, 0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 17:12:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 17:12:05 executing program 3: keyctl$unlink(0x3, 0x0, 0x0) 17:12:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002ff8019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:05 executing program 5: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 17:12:05 executing program 4: r0 = socket(0x1, 0x5, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f00000000c0)) 17:12:05 executing program 3: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 17:12:05 executing program 5: semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x2, 0x1000}], 0x1, &(0x7f0000000140)={0x77359400}) [ 1544.981591][T17528] loop1: detected capacity change from 0 to 264192 [ 1545.018586][T17528] EXT4-fs (loop1): bad geometry: block count 2164195840 exceeds size of device (132096 blocks) 17:12:05 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x541b, 0x0) 17:12:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200aa19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:05 executing program 4: r0 = memfd_secret(0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 1545.182588][T17544] loop1: detected capacity change from 0 to 264192 [ 1545.199376][T17544] EXT4-fs (loop1): bad geometry: block count 2852127232 exceeds size of device (132096 blocks) 17:12:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.pending_reads\x00', 0x280003, 0x0) 17:12:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8930, &(0x7f00000003c0)={'wg2\x00'}) 17:12:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8947, &(0x7f00000003c0)={'wg2\x00'}) 17:12:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000212b019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:06 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, 0x0) 17:12:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x3, r1, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r1) 17:12:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) 17:12:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x80108906, 0x0) 17:12:06 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 1545.819452][T17551] loop1: detected capacity change from 0 to 264192 17:12:06 executing program 0: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) 17:12:06 executing program 2: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0) [ 1545.873617][T17551] EXT4-fs (loop1): bad geometry: block count 2953970176 exceeds size of device (132096 blocks) 17:12:06 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000100)) 17:12:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8953, 0x0) 17:12:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000212b119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000005003010"], 0x24}}, 0x0) 17:12:06 executing program 0: r0 = socket(0x18, 0x0, 0x0) bind$isdn_base(r0, 0x0, 0x0) 17:12:06 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xea87f95e87a81ff3, 0xffffffffffffffff, 0x10000000) 17:12:06 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0xc0400, 0x0) 17:12:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @sliced}) 17:12:06 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0xc, 0x0, r0) 17:12:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89b0, &(0x7f00000003c0)={'wg2\x00'}) [ 1546.088815][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1546.103278][T17575] loop1: detected capacity change from 0 to 264192 17:12:06 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x11, r1, 0x0) 17:12:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x4, 0x0, r0) 17:12:06 executing program 2: keyctl$unlink(0xf, 0x0, 0x0) 17:12:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890b, 0x0) [ 1546.178898][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1546.217885][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:06 executing program 0: r0 = socket(0x18, 0x0, 0x1) recvmsg$qrtr(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x38, 0x0) 17:12:06 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0, 0xff000000}) 17:12:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="674b8d4fd863ecad203a08c6f178d0082ae9c098d03fe956924457d4e8a79627f902010025480dfa0ed3e8958108120d3421acb3e951a0a2065033f63e6124f4d06fd39eb781a5ae7b96a6fa4d32949800431e4c3742aad7505ebac5dbde31423cf20b18cd622997fa4b7c2e7c537058b786d879a60e20a98bb1b5139cdae7fea651857f324090b60e8a32fe096db29d14662b8d88c4582eebeb5934f2d48b57a5c8779734cba0fd455c7e5ecc3546", 0x10e, r0) 17:12:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000212b219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:06 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) [ 1546.245785][ T2968] loop1: unable to read partition table [ 1546.268041][T17575] EXT4-fs (loop1): bad geometry: block count 2970747392 exceeds size of device (132096 blocks) 17:12:06 executing program 3: r0 = socket(0x15, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:12:06 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 17:12:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8915, 0x0) 17:12:06 executing program 2: r0 = socket(0x18, 0x0, 0x1) getsockname$qrtr(r0, 0x0, 0x0) 17:12:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8946, &(0x7f00000003c0)={'wg2\x00'}) 17:12:06 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='TIPC\x00', 0x0, r1) [ 1546.425903][T17607] loop1: detected capacity change from 0 to 264192 17:12:06 executing program 0: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1800) 17:12:06 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f00000001c0)="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", 0xff1, r0) [ 1546.484771][T17607] EXT4-fs (loop1): bad geometry: block count 2987524608 exceeds size of device (132096 blocks) 17:12:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 17:12:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203b519000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:06 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 17:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) 17:12:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8904, 0x0) 17:12:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x0) 17:12:06 executing program 3: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) 17:12:06 executing program 5: r0 = socket(0xa, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) [ 1546.681793][T17631] loop1: detected capacity change from 0 to 264192 [ 1546.696496][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:06 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x200) 17:12:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) [ 1546.725321][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:06 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) 17:12:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203c019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1546.767298][ T6566] loop1: unable to read partition table [ 1546.790503][T17631] EXT4-fs (loop1): bad geometry: block count 3036873216 exceeds size of device (132096 blocks) [ 1546.909281][ T3676] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1546.926518][T17646] loop1: detected capacity change from 0 to 264192 [ 1546.942243][T17646] EXT4-fs (loop1): bad geometry: block count 3221422592 exceeds size of device (132096 blocks) [ 1547.149299][ T3676] usb 3-1: Using ep0 maxpacket: 16 [ 1547.269481][ T3676] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1547.278591][ T3676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.289622][ T3676] usb 3-1: config 0 descriptor?? [ 1547.549394][ T3676] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1549.129407][ T3676] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1549.138606][ T3676] usb 3-1: USB disconnect, device number 27 17:12:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8906, 0x0) 17:12:09 executing program 3: socketpair(0x11, 0x2, 0x300, &(0x7f0000000040)) 17:12:09 executing program 5: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 17:12:09 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x19052, r0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 17:12:09 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x3d873d2aeed709f1}, 0x10) 17:12:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203c819000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8940, &(0x7f00000003c0)={'wg2\x00'}) 17:12:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8941, 0x0) [ 1549.620200][T17655] loop1: detected capacity change from 0 to 264192 17:12:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) 17:12:09 executing program 5: r0 = socket(0x1, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 17:12:09 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000a00)=""/8) 17:12:09 executing program 0: syz_open_dev$sg(&(0x7f0000000ac0), 0x2, 0x272002) [ 1549.679751][T17655] EXT4-fs (loop1): bad geometry: block count 3355640320 exceeds size of device (132096 blocks) 17:12:10 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 17:12:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200ca19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:10 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004540)={0xb0, 0x0, r1, [{{}, {0x0, 0x0, 0x3, 0x0, '}%@'}}]}, 0xb0) [ 1549.765367][T17664] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8911, &(0x7f00000003c0)={'wg2\x00'}) 17:12:10 executing program 4: r0 = socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) 17:12:10 executing program 3: syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0x0) 17:12:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) [ 1549.877058][T17674] loop1: detected capacity change from 0 to 264192 17:12:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x40086602, &(0x7f00000003c0)={'wg2\x00'}) 17:12:10 executing program 0: clock_gettime(0x1a749d0e28c1f7a, 0x0) 17:12:10 executing program 3: fsopen(&(0x7f0000000000)='openpromfs\x00', 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) [ 1549.927498][T17674] EXT4-fs (loop1): bad geometry: block count 3388998144 exceeds size of device (132096 blocks) 17:12:10 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) 17:12:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200d319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8912, 0x0) 17:12:10 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 17:12:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 17:12:10 executing program 3: syz_open_dev$dri(&(0x7f0000000280), 0x7, 0x40) [ 1550.164687][T17699] loop1: detected capacity change from 0 to 264192 [ 1550.197617][T17699] EXT4-fs (loop1): bad geometry: block count 3539993088 exceeds size of device (132096 blocks) 17:12:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x10, r1, 0x0) 17:12:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000280df19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1550.400194][T17711] loop1: detected capacity change from 0 to 264192 [ 1550.401309][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1550.440689][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1550.465158][ T6566] loop1: unable to read partition table [ 1550.481134][T17711] EXT4-fs (loop1): bad geometry: block count 3749708288 exceeds size of device (132096 blocks) 17:12:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:11 executing program 5: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 17:12:11 executing program 4: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x13, r0, 0x0) 17:12:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24004001) 17:12:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000209050000000000000000000a000006090001007379c9b55a"], 0x44}}, 0x0) 17:12:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000202e119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) [ 1550.821268][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.827671][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.856264][T17717] loop1: detected capacity change from 0 to 264192 17:12:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, 0x0) 17:12:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8941, &(0x7f00000003c0)={'wg2\x00'}) [ 1550.948028][T17717] EXT4-fs (loop1): bad geometry: block count 3775005184 exceeds size of device (132096 blocks) 17:12:11 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x111240, 0x0) 17:12:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000280f019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1551.180132][T17741] loop1: detected capacity change from 0 to 264192 [ 1551.197795][T17741] EXT4-fs (loop1): bad geometry: block count 4034920960 exceeds size of device (132096 blocks) [ 1551.275610][ T6566] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:12:12 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 17:12:12 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x301200, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) 17:12:12 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) 17:12:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203f119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:12 executing program 3: r0 = socket(0x1, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={0x0, 0x180}}, 0x0) 17:12:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) 17:12:12 executing program 0: r0 = socket(0x1e, 0x5, 0x0) getpeername$qrtr(r0, 0x0, 0x0) [ 1552.235104][T17752] loop1: detected capacity change from 0 to 264192 [ 1552.256083][T17752] EXT4-fs (loop1): bad geometry: block count 4043506176 exceeds size of device (132096 blocks) 17:12:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x0, 0xfffff837}, 0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r7, 0x1f00, 0xff00}, 0x8) 17:12:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, &(0x7f00000003c0)={'wg2\x00'}) 17:12:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 17:12:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203f519000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:12 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 17:12:12 executing program 5: r0 = socket(0x1, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 17:12:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8993, &(0x7f00000003c0)={'wg2\x00'}) [ 1552.482299][T17772] loop1: detected capacity change from 0 to 264192 17:12:12 executing program 5: syz_io_uring_setup(0x7563, &(0x7f0000000000)={0x0, 0x0, 0x16, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1552.544408][T17772] EXT4-fs (loop1): bad geometry: block count 4110615040 exceeds size of device (132096 blocks) 17:12:12 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x125000, 0x800, 0x0, 0x1}, 0x20) 17:12:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000280f919000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 17:12:12 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x1d, 0x0, 0x0) [ 1552.721272][ T3676] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1552.729325][ T2929] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1552.768685][T17785] loop1: detected capacity change from 0 to 264192 [ 1552.778501][T17785] EXT4-fs (loop1): bad geometry: block count 4185915904 exceeds size of device (132096 blocks) [ 1552.979316][ T2929] usb 1-1: Using ep0 maxpacket: 16 [ 1552.984669][ T3676] usb 3-1: Using ep0 maxpacket: 16 [ 1553.129397][ T3676] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1553.138548][ T2929] usb 1-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1553.147884][ T3676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.155942][ T2929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.165591][ T3676] usb 3-1: config 0 descriptor?? [ 1553.174916][ T2929] usb 1-1: config 0 descriptor?? 17:12:13 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f0000000040)) 17:12:13 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x80086301, 0x0) [ 1553.377055][T17792] QAT: Invalid ioctl -2146934015 [ 1553.439820][ T2929] usb 1-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1553.449264][ T3676] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1554.629495][ T3676] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1554.638979][ T3676] usb 3-1: USB disconnect, device number 28 17:12:15 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0xf, r1, 0x0) 17:12:15 executing program 3: pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, 0x0) [ 1555.099575][ T2929] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1555.112206][ T2929] usb 1-1: USB disconnect, device number 24 17:12:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000880), 0xffffffffffffffff) 17:12:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000201fa19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:15 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x4ed}, 0x10) modify_ldt$write2(0x11, &(0x7f00000007c0), 0x10) 17:12:15 executing program 5: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x200c0) 17:12:15 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x541b, 0x0) 17:12:15 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x18, 0x0, r0) 17:12:15 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x0, 0xff}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) syz_open_dev$dri(&(0x7f0000000640), 0xbbcd, 0x400002) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_open_dev$dri(&(0x7f0000000780), 0x6, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000007c0)=""/79) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) 17:12:15 executing program 3: semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x9}, {}], 0x2, &(0x7f0000000080)={0x77359400}) 17:12:15 executing program 5: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) 17:12:15 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0xc0400, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) [ 1555.325357][T17804] loop1: detected capacity change from 0 to 264192 17:12:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8903, &(0x7f00000003c0)={'wg2\x00'}) 17:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}}, 0x0) [ 1555.408557][T17804] EXT4-fs (loop1): bad geometry: block count 4194370048 exceeds size of device (132096 blocks) 17:12:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r0) 17:12:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203fc19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8906, 0x0) 17:12:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x1d, r1, 0x0) 17:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x1) 17:12:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 17:12:15 executing program 2: syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x52}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4}, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000002c40), 0x1) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x50, 0x0, 0x400, 0x226, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3db}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}]}, 0x50}}, 0x15) 17:12:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0}) [ 1555.606521][T17828] loop1: detected capacity change from 0 to 264192 [ 1555.663056][T17828] EXT4-fs (loop1): bad geometry: block count 4228055552 exceeds size of device (132096 blocks) [ 1555.929397][ T142] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1556.119333][ T142] usb 3-1: device descriptor read/64, error 18 17:12:16 executing program 5: r0 = socket(0x18, 0x0, 0x0) recvmsg$qrtr(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x38, 0x0) 17:12:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x20fff000, 0x0, 0x19052, r0, 0x0) 17:12:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x17, r1, 0x0) 17:12:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203fd19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x19052, r0, 0x0) 17:12:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000f, 0x19052, r0, 0x0) 17:12:16 executing program 3: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x40) [ 1556.288119][T17841] loop1: detected capacity change from 0 to 264192 17:12:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 17:12:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x894c, 0x0) [ 1556.332689][T17841] EXT4-fs (loop1): bad geometry: block count 4244832768 exceeds size of device (132096 blocks) 17:12:16 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1556.389414][ T142] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1556.599342][ T142] usb 3-1: device descriptor read/64, error 18 [ 1556.719748][ T142] usb usb3-port1: attempt power cycle [ 1557.129340][ T142] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1557.220047][ T142] usb 3-1: Invalid ep0 maxpacket: 0 [ 1557.379688][ T142] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1557.472443][ T142] usb 3-1: Invalid ep0 maxpacket: 0 [ 1557.477879][ T142] usb usb3-port1: unable to enumerate USB device 17:12:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203fe19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:18 executing program 5: syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1a, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x1c, &(0x7f0000001300)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7f, 0x0, 0x0, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7}]}, 0x1, [{0x0, 0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x33, &(0x7f00000018c0)={0x5, 0xf, 0x33, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "5d226d7f345346b75ffb83ce56f5a277"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x4, 0x0, 0x0, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2a, 0xf2}]}}) r0 = syz_clone(0x24042200, &(0x7f0000002a00)='.\f|', 0x3, &(0x7f0000002a80), 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) 17:12:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) 17:12:18 executing program 2: add_key(&(0x7f00000001c0)='trusted\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x0) 17:12:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8914, &(0x7f00000003c0)={'wg2\x00'}) 17:12:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x8, 0x0, r0) 17:12:18 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x7, 0x0, 0x0) 17:12:18 executing program 4: r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x377]) [ 1558.682364][T17863] loop1: detected capacity change from 0 to 264192 17:12:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8942, &(0x7f00000003c0)={'wg2\x00'}) [ 1558.727552][T17863] EXT4-fs (loop1): bad geometry: block count 4261609984 exceeds size of device (132096 blocks) 17:12:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8982, &(0x7f00000003c0)={'wg2\x00'}) 17:12:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000280fe19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:19 executing program 0: fsopen(&(0x7f0000000000)='openpromfs\x00', 0x0) 17:12:19 executing program 4: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) 17:12:19 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x23800, 0x0) [ 1558.884484][T17878] loop1: detected capacity change from 0 to 264192 [ 1558.899734][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1558.908907][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1558.954745][ T6566] loop1: unable to read partition table [ 1558.961119][ T1480] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1558.997042][T17878] EXT4-fs (loop1): bad geometry: block count 4269801984 exceeds size of device (132096 blocks) [ 1559.239367][ T1480] usb 6-1: Using ep0 maxpacket: 16 [ 1559.379593][ T1480] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1559.639379][ T1480] usb 6-1: string descriptor 0 read error: -22 [ 1559.646267][ T1480] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1559.655576][ T1480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.665689][ T1480] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1559.674717][ T1480] usb 6-1: no configuration chosen from 1 choice 17:12:21 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x8e980) 17:12:21 executing program 2: r0 = memfd_secret(0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80053, r0, 0x0) 17:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 17:12:21 executing program 4: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000340)) 17:12:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002fffe19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:21 executing program 0: r0 = socket(0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) [ 1561.664210][ T1480] usb 6-1: USB disconnect, device number 67 17:12:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000700)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 17:12:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8982, 0x0) 17:12:21 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)) 17:12:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8921, &(0x7f00000003c0)={'wg2\x00'}) [ 1561.727197][T17893] loop1: detected capacity change from 0 to 264192 17:12:22 executing program 5: statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) [ 1561.800819][T17893] EXT4-fs (loop1): bad geometry: block count 4278125056 exceeds size of device (132096 blocks) 17:12:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 17:12:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000380)={0x0, 0x0}) 17:12:22 executing program 0: pipe2$watch_queue(&(0x7f00000002c0), 0x80) 17:12:22 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x19052, r0, 0x180000000) 17:12:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200ff19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, 0x0) 17:12:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$unlink(0x3, r1, 0x0) [ 1562.076332][T17920] loop1: detected capacity change from 0 to 264192 [ 1562.139441][ T3676] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1562.148284][T17920] EXT4-fs (loop1): bad geometry: block count 4278190592 exceeds size of device (132096 blocks) [ 1562.194300][ T6566] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1562.419418][ T3676] usb 4-1: Using ep0 maxpacket: 16 [ 1562.569859][ T3676] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 1562.583593][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.619853][ T3676] usb 4-1: config 0 descriptor?? [ 1562.879416][ T3676] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1564.039521][ T3676] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1564.053310][ T3676] usb 4-1: USB disconnect, device number 18 17:12:24 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="01805fad"], 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:12:24 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x4, r1, 0x0) 17:12:24 executing program 4: r0 = memfd_secret(0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 17:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000004"], 0x24}}, 0x0) 17:12:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203ff19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:24 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000700)='\x00', 0x0, r0) 17:12:24 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x125000, 0x800}, 0x20) [ 1564.562732][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1564.578779][T17930] loop1: detected capacity change from 0 to 264192 17:12:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a1, &(0x7f00000003c0)={'wg2\x00'}) 17:12:24 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) 17:12:24 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) [ 1564.627637][T17930] EXT4-fs (loop1): bad geometry: block count 4278387200 exceeds size of device (132096 blocks) 17:12:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020fff19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:24 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000240)=""/187) [ 1564.830556][T17948] loop1: detected capacity change from 0 to 264192 [ 1564.835589][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1564.852700][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1564.867821][ T6566] loop1: unable to read partition table 17:12:25 executing program 5: syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffffff, 0x101440) 17:12:25 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9c41, 0x0) 17:12:25 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:12:25 executing program 3: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x7ffff000}}, 0x0) 17:12:25 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) [ 1564.882577][T17948] EXT4-fs (loop1): bad geometry: block count 4279173632 exceeds size of device (132096 blocks) 17:12:25 executing program 0: open$dir(0x0, 0x400201, 0x0) 17:12:25 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x60d000, 0x800}, 0x20) 17:12:25 executing program 4: clock_gettime(0x0, 0xfffffffffffffffc) 17:12:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000280ff19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:25 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) 17:12:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x103f02) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) 17:12:25 executing program 2: r0 = socket(0x29, 0x2, 0x0) connect$can_j1939(r0, 0x0, 0x0) 17:12:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891e, &(0x7f00000003c0)={'wg2\x00'}) 17:12:25 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf000000, 0x0, 0x19052, r0, 0x0) 17:12:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8923, &(0x7f00000003c0)={'wg2\x00'}) [ 1565.125899][T17970] loop1: detected capacity change from 0 to 264192 [ 1565.184127][T17970] EXT4-fs (loop1): bad geometry: block count 4286579200 exceeds size of device (132096 blocks) 17:12:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 17:12:25 executing program 0: syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x5, &(0x7f0000001300)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) syz_clone(0x24042200, &(0x7f0000002a00), 0x0, &(0x7f0000002a80), 0x0, 0x0) 17:12:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 17:12:25 executing program 2: r0 = socket(0x18, 0x0, 0x2) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:12:25 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f00000001c0)="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", 0xe01, r0) 17:12:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002feff19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:25 executing program 5: shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) 17:12:25 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x180}}, 0x0) [ 1565.372754][T17988] loop1: detected capacity change from 0 to 264192 [ 1565.412855][T17988] EXT4-fs (loop1): bad geometry: block count 4294836736 exceeds size of device (132096 blocks) 17:12:25 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) 17:12:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0xe, r1, 0x0) 17:12:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x5, 0x0, r0) 17:12:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000400000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000880), r0) [ 1565.549342][T17998] loop1: detected capacity change from 0 to 264192 [ 1565.576925][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1565.603502][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1565.627715][ T6566] loop1: unable to read partition table [ 1565.645387][T17998] EXT4-fs (loop1): bad geometry: block count 67109376 exceeds size of device (132096 blocks) [ 1565.669498][T31331] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1565.909395][T31331] usb 1-1: Using ep0 maxpacket: 16 [ 1566.029866][T31331] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1566.299433][T31331] usb 1-1: string descriptor 0 read error: -22 [ 1566.305819][T31331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1566.319463][T31331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.331675][T31331] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1566.340543][T31331] usb 1-1: no configuration chosen from 1 choice 17:12:28 executing program 0: socketpair(0x26, 0x5, 0x3, &(0x7f0000000040)) 17:12:28 executing program 4: openat$pfkey(0xffffffffffffff9c, 0x0, 0x22002, 0x0) 17:12:28 executing program 2: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 17:12:28 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) 17:12:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8901, 0x0) 17:12:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}]}, 0x50}}, 0x0) [ 1568.348135][ T142] usb 1-1: USB disconnect, device number 25 17:12:28 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0xf, r1, 0x0) 17:12:28 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x10000, 0x4) 17:12:28 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x359b03, 0x0) 17:12:28 executing program 0: r0 = socket(0x1, 0x5, 0x0) recvmsg$qrtr(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x210}, 0x38, 0x0) [ 1568.396404][T18014] loop1: detected capacity change from 0 to 264192 [ 1568.424501][T18014] EXT4-fs (loop1): bad geometry: block count 33554944 exceeds size of device (132096 blocks) 17:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 17:12:28 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="915d04bc7f60af1f35220fb90169762abce409aeef201e22a861fef8001d7b8a5f9de8634bcc6efe11f49a62015a6bc64e4ea48cb9d556886473fbb5eca70f20de821c25ad1ee0d9e5614f8ba13baec2881e30ba818a607b451afa30591a525eafe8b60760efecb5c7e6b89e95c7c492bcc0b681f43f6e72fc42a8193c21af493a5836dea3f5a44e329162ef5f5b676c9135e6a69d171c411c2e6d082b8b743dfd9c680e172edb3f1dec4410bf72e843b8a074251d308c364687e28b3e1aa8d0234d3828d08dec115e0c07e59f6766046d9cc7e0074e4fada16dc2fa7882e478d45d6fbb5bb22a531774b8b1c9cf75107d8ab553ffb3935b7fcb34a2d8843c999c95a0d4100b2744e990d7a03b637d3519b06e86fb4f82ff749b6703e652d2d3d8eea63ecf7ad3c48e3da498249c94516344c3fe4f081a43273d823262d52f7ddc4717b9c75c5389cc1be9744686c8b2160a12d547f5e22083c3b0cc089619c5d59543fb94d0fc67db712d77da5d5e98eb3c8cb4705aa96e4038f171eda9e1ebc66ba14011f68886f23f99507aaa49368457de000d4c2c4f5935b2a918f27637686210b3e16d8973d0a2a2459ee179d703eeebaabaa293e3a6fed722bd0693b6655f39e84d2c629e3a99688e4eaa5d2109b292b201fe684f31dfdc31b1c24161b2e4a44e2349a4d2df75ab5c552a21bddf6e13fbc10fed9232d3865ffc22df1569ace9733da69a48d6c983ffe60975e4cdd0f9e675cc344ffb05ac4e28033b87b6c232782148caddd460d40867d29224e03314baad72b442315175e10497a8060f77d134900a7190ab0ea8cb1d76cfd55d65a381d9aea7d888ba4cc3cfcc08590f1bc79135f6151842937cb1367fc1d6aade43321bb3f3a5c9d9692d9556e7be35d3a0d880de58bb63db9af2cb58702f396af85b15677fedf9eef485f78acb27b8a07c8c1eee2611b1a9c054e5c7b5ff55981c923e42e9ce8dcad2fb5ff04029c0baf54c9aa7575aca5f9c6dea82994f771be02d28bb9e5ee0e2b2a5b0fdf497793f9135a7a54c9be194cf3b8c182fd296988b41653f8bc0004c7dd7e7c9671e59487d2a2a9d4f0b7e76e345d2e46598b5ddd106a4c9dce1cfb954c21a8fd9993105f8ca7361dd935c03eb4cb68f07a9247da33ac770f56c4b965b4d8a4b4a668150ee706dd8c6ccb6e9033eb07aa72690c4cad1e72466f05bdfb0815059106b6afd39b38d00f390695f5b88264d02210a7ea2c3e0b8f689b3aa97630409539ac4511d12adef7881e26d728dc929a74b02f9d2efe19b217ff8e50dfdc8fbd54c765123c0b769f04b09e3623b0bbf3de132ca76c382010eaad46176c8ebff8d8b949894b1633aa9c43fbb42ad58be882b664d6e66a643159892bbd18917cb6d5fbb185bf223b042919d79322d4ff93478ef573f9e82d3f5a6d0933ee82e03509734a74c6dafefb25c62a2911bb861a16b0d44f238cdbd80f6095699a14c659acaf7efc61e320767177a3748a36d77b0e24bc4b8fac8dbb10f7338349c0ef7f0b98dc9cbc6836b43d4e1f6f3b077ac092ad5954bb0805b6bf8a03d49ff60908f11d27a380777816d3db9dfdf978ac53dde3c64e3af80c150ef9616ae848b62d5b8e33cf6c30bab96cae987b2fe35962d33cdd90bca856231a9d2584e7725722fb7c2d32e63fa522bcd8ea1b12b7497d132b119d2fd6f5e41790555a6320714194dfdfa5babba9719503d5113ac48acd53769d7cbb06456e0739ea9e8d803407cbeff0625ef44feff79742dad9de187faa7cab3747159a29e3c7f92ff2ab81b21ec196be45d8ca8e4a64f90e723afe402a530513a8aaf98be4026359ef10cf88a622503908cdf24174a56a5c48324e6b411e6d81ceedad16548fa2ddcf8a1610f2a22ddf95f9f157692a34274c1b53dca8752190a31060f2c43205ecdda7adfca627352c0764dcf66ea6f84831be3c62845efa381ddd153633cf60da1f926645f6fe4352e57105e54acf282626513920bfa358777bd340117e16145d53c4a80fdae83bc4978a24b2ee892d596fff1cd98c07c8ca51588604287ad3f22018584033b30ebcd5ffd62efabd961ddcd80093523cb9fbd3c64b020cdfbd4b517b59b479a8986ea799fdcd7c2e01037b201ab8b7fb8d2f6078b667ef75e812a7699b7d371f8ee742bda4aeea71fe2ce0be9f5fd53b78f2f665e9b52b908c559d2233d6f963ec5039dc4595dfefb69e2f7af9423f0af946937d0f5bdaa06282edb4e92456f2a42ca409e1c6203c22c5b2cf2d5dafe81617b7b3395bb4725e22aa3c506d5fe2e9e86ba21b86b8ee6b27a853b1c4ad8a7658a8d33cec66f400926cf817d901f34b5c2b4e4396bdd743eb10e71d747aa339c2ff732c26dc8e5271e705d044c98c3014dfa2977d5f9d754f54ce853abd343cf6dcad30e44cf25dcd4f78f81df6a3bb4931c97f59dfb678cd6adc7c36240a0139a4e214d5285c187e5682f56c21960c162c9e7fa7a0955add3eaaee2cf147394516fdbd186aa1a2f885c2531624d53e635f059b7330c990fad9e0d6aea858acaebe38a1cc4f3fcc615d61f0342fa4e133be9fd78eb900a1b71a17ff875d96e0a7567f4a4ccfba7e341e5372b5323f7d583ad35cf6e31d7b4c51062493910239eb323e23d58e296c157134813c2f36a66bf0824183b0ad70d05da87c8ab065069283553dff892c385a3867dc67e70db38f26ab24a191d14058c4ab5358f77f750a39c854a81650a51375370800169882dfbcf0ca954110a5ae9d4ad278b9fb2ce33530955baf658a52f702cb3b61e260445ba9a39f8b453a8f8b7bdb7c6ce0ebd926570fa3294080886fd1126324775ce6aabac75f9450723edf8fb3b50f7a0d77f96caffdcdb4e2ae91d6bac9052d1bd0df4bb0ab91980b12e792abdf2dedaf8fcbe509b3ee04cbb10322311a61a70582ae84679c79d54da9495e055260d9a0b4fa0991d46e665bf33263cc792fe5f58831444cc67ac0bde964391c3ab0cf5eddc0f14b4c7ccb3022a5fc736ba31fe98ca8e6ed0e478c464cd41084567798399cc1ea377d144d030e02917f75feacb5306ed8fb0def3fba67c521ba1b72e04446fc35f6ff51f4543e1dbddfba5b9b9c29042b9e84e4492667e29284a7f83cb03a92f65c7f17af335fdaeda8326ba3d3888540c75e4a0a9d22a6a8c778b5d84b191788960a939bd797879354ed7fb83d071769edbd8a6d2ba17f7d559d166e3a5c69d6d193edf6c26944afc47d313f9eed2a80da0f8b4304477d270167fd4223e87e102ffd9dff554a8befb09272d936d1494b3ee96a56d2268d8f58551462e0aa74b3699ff89243a42c3eca26f86cffcd5379b13279b9439aae2090cdb0693b1c85fe6cb7682dc943bbb74f311fef32bdd36c647c160dc60a038c9b1bb45fce97c54aa32c4e13ed93aed444b40b58cbf83ca978f08db6042d260228cd0cdf440bbfb925bac85d73d8bb47e6fc5ae0488f1a593cda1cdd30a534325160bc9586de6737f12cae406e979c63deb3ee9e98b0ccd47a0d2c887f80f857786897623666ddc340507a7254c59a8310be76696771b44c3a27dbd3e49c42dafc4c5cf4b276df7c12040e3f8090d8877d6c35993df75d247c12a483956fb417187e685e12d42dbfdc89751595fb5a3862635a5d968f9221bfab32d87ed0c6576c2d736ea25d3848ee5839faef3207afe27cdc71598b653c12fde07ad12323dff3c9a105e4e939f3677ef76c57e56158e9a5eadc4a0a5836aa0e4f7340b0e657967d2ebf6efe92ed104280d1ced92c44970cb2b9e26d2c3ce72cf19bbd26f1a436b59dac1dc5f1ce7dd766d9b94690f27b58b3026785500c7fa08b8646e801d77297bbb9ce098055a5a9954cffe6a1b7adf48096123fb5444648a8e48d32a820ba465c183b6a9af4418e5a2f96722277cd67054ca2a54fd8d12f9024ea29f744ae83aecab053a7ab4b9c2c2011f25a129547e7f91dc6927df0f64d249763336d2f65a8e5d3c0eda99383b1d7e3604d6c5984224be6a814f51e169402484ca421b1284b9566be08282c43371a6006642b44dbd5b065c9c7160678c5659c6eaf5d3cf8db06cdb36236dff0f4a2e415c2f85d25093fe30f6a1402f2b1fbb3d51c72c0e6e81eb4c82a883437fd94bddc9096ea09565590a839d1d68aa953084c5874a9bb7f9364571085ccefcf453fe965bbcb2f228d79613fa300f780aa64576721b03bb1ee1eed83bcb3e7de44c9f2af51089286ee679165e4d1bbb75b4703634cc352544f3de77a6870845c96883c16ecd4b5af2800680403f4cf445e4cbc844b34ca365958525e6583998d140da561ee30f963e759cabcd47558696cd55634ab8341ed7ec7750e939aaf36abcc23c702110e043196909557b6c01c3168dbc7c5d4e0f658b2c47b65458898f8d7d2dfb4e03791a3072afa425008272ba6b2e1506791d088274535d91a14a8460674e62cb9628208fe1ae7ee5984848a12a82ceb76c5832c1410cf469d780857e70e0d7ed62b447e9e56e9da3367007c658433fcb45d7808a2c8f1283a107598950ffc3af1762cd92ec9932383ad5a906863c959857c350766a36497220853e88fd5b050c7ab080bf877242dcaf35b1f05a05a35de2741e5ed0a8e8637629d862473480a49861c46bc5a146195722019bd79e04d927261ccee023681db5ba8fd94edbeff93f7cc9deeb85ede161f1fd3fc0f7ce485fcb331e0da20528e1aa56943870dd2a003e80fae8cc944dc4393c3de645481586d263fac3194e6e600ffb2b39b43852cea3d98fdf29d5c94d5bd7312cf177e388ef24206bec635ee8c38391e00c576a85f9aee5ec9b336cf57493fa939d21582625865d9ebc47b721b6c67fa5014866f990169d42905dd5d218a40a49b2fbe9721c0bb2ca68f161d7a717072d9af78d88a0dddc269df0790ff7611f7346d2923cc7cea9c9100632478504ea63b6c268e8ebc2806d0c77799e40407bd9c488137bfb9ccc412ff5855b88818eb9637344f247cd28e26ec6500d0c595c28ce7e1b5c92970addcdfd14154c760032335bb7cb4ffdb2e1da547796c061d550c0f6f2b55d5db8b627502b5e453e9c69b6075770cdb1ac356cf021e4575fc7cb6c3d135045315e728f539d938da1c0ff5513946f78536a7b03599b62a6f4c6f37d6884f533395eb5c6810f611e9bb1884bd5877ac665c1cb3834b9e47e91d8f52bc48b895ce62635d5d4de606030563704be3139693fef66f337b4b8e4cd533b225e96755f1c43e4f9e5b55e61a522374401fe638c4d7d626f8ef1e34962833543a170aa91235230842f91c49457c96ed51269bb5d57b05747f69f7a8f262e6d316d2ec11bac038d61754ef923bfb15cb1b2eac7c2e5813aded32cf6634fdad1f92fb91b72d2f9b8f5f267586795aa5ceb7e967e292584a3100537eabf52fc3cc8ccb27a1cc668e92b4c74fdd4495e3155cc70a3351ce52af803ff61103598a20c13eacc8e2c82551ecf674bbcbaa6fc4c10d57414b0f7ffb8a9aabf9529795e032e3aba8b47338ee3210e56f27f42a2e276a701bf1124e3a2a7e2015e5e5ba857933452ade57364d16015643b13c948d355c5ca0956cff2c92398179c9e169b7f1945049d640209b56198c3b30f060873742c3a4eeffb6cbac232103693d213af2789ee87acb869c6cd76b567db43908dae266959760fed64f02505588feb668f2e388e41baf56c9fff1755400fcc30b59767bfd8b8ef93ea3748669e2d0864589b2407d275afea2b3faad40e6b7c75c986b75af94e", 0x1000, r0) 17:12:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:28 executing program 0: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 17:12:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x10}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) 17:12:28 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20180, 0x0) 17:12:28 executing program 4: r0 = socket(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:12:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) [ 1568.628744][T18032] loop1: detected capacity change from 0 to 264192 [ 1568.660271][T18035] netlink: 'syz-executor.5': attribute type 48 has an invalid length. 17:12:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8970, &(0x7f00000003c0)={'wg2\x00'}) 17:12:28 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x107040, 0x0) 17:12:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x401c5820, &(0x7f00000003c0)={'wg2\x00'}) [ 1568.691753][T18032] EXT4-fs (loop1): bad geometry: block count 50332160 exceeds size of device (132096 blocks) 17:12:28 executing program 2: r0 = memfd_secret(0x0) mmap$xdp(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000007, 0x11, r0, 0x0) 17:12:28 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:12:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000419000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 17:12:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x6, r1, r2) 17:12:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891a, 0x0) 17:12:29 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x12}, 0x18) 17:12:29 executing program 5: keyctl$unlink(0x11, 0x0, 0x0) 17:12:29 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x8, 0x28200) [ 1568.895826][T18055] loop1: detected capacity change from 0 to 264192 [ 1568.927880][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:29 executing program 3: syz_open_dev$dri(&(0x7f0000000640), 0x0, 0x20040) 17:12:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891d, &(0x7f00000003c0)={'wg2\x00'}) 17:12:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) close(r0) 17:12:29 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000700)='\x00', 0x0, 0xffffffffffffffff) [ 1568.959275][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) [ 1569.019934][ T6566] loop1: unable to read partition table [ 1569.046674][T18055] EXT4-fs (loop1): bad geometry: block count 67109376 exceeds size of device (132096 blocks) 17:12:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000519000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:29 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x28300, 0x0) 17:12:29 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/107, 0x125000, 0x800}, 0x20) 17:12:29 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsmount(r0, 0x0, 0xa) 17:12:29 executing program 0: syz_open_dev$sg(&(0x7f0000000ac0), 0x0, 0x0) 17:12:29 executing program 4: r0 = socket(0x1e, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 17:12:29 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 17:12:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) [ 1569.224430][T18086] loop1: detected capacity change from 0 to 264192 [ 1569.235684][T30949] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:29 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000002c00)='ns/time\x00') [ 1569.268803][T30949] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 17:12:29 executing program 4: r0 = socket(0x18, 0x0, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 17:12:29 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="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", 0x5c9, r0) [ 1569.351004][T30949] loop1: unable to read partition table [ 1569.358068][T18086] EXT4-fs (loop1): bad geometry: block count 83886592 exceeds size of device (132096 blocks) 17:12:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000619000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x3, r1, 0x0) 17:12:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x3c}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) 17:12:29 executing program 3: ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) 17:12:29 executing program 4: r0 = socket(0x18, 0x0, 0x1) accept4(r0, 0x0, 0x0, 0x0) 17:12:29 executing program 5: keyctl$unlink(0xa, 0x0, 0x0) 17:12:29 executing program 0: pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xfdef) 17:12:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, 0x0) [ 1569.507509][T18103] netlink: 'syz-executor.2': attribute type 60 has an invalid length. [ 1569.531716][T18107] loop1: detected capacity change from 0 to 264192 17:12:29 executing program 3: getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) 17:12:29 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="91", 0x1, r2) keyctl$unlink(0x9, r1, r2) [ 1569.571562][T18107] EXT4-fs (loop1): bad geometry: block count 100663808 exceeds size of device (132096 blocks) 17:12:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890d, 0x0) 17:12:29 executing program 3: r0 = socket(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:12:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000719000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:29 executing program 0: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 17:12:29 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 17:12:29 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000440)={0x0, [], 0x7}) 17:12:29 executing program 5: keyctl$unlink(0x5, 0x0, 0x0) 17:12:29 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$incfs(r0, &(0x7f0000000400)='.log\x00', 0x0, 0x0) 17:12:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x19052, r0, 0x0) 17:12:30 executing program 3: bind$tipc(0xffffffffffffffff, 0x0, 0x0) [ 1569.781765][T18131] loop1: detected capacity change from 0 to 264192 [ 1569.794037][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.817476][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:30 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9201, 0x0) 17:12:30 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1569.848247][ T6566] loop1: unable to read partition table 17:12:30 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 17:12:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) [ 1569.889246][T18131] EXT4-fs (loop1): bad geometry: block count 117441024 exceeds size of device (132096 blocks) 17:12:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000919000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:30 executing program 3: syz_open_dev$dri(&(0x7f0000000640), 0x0, 0x400002) 17:12:30 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1}}) 17:12:30 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x0, r2}, 0x10) 17:12:30 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000540)=""/228) 17:12:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 17:12:30 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1570.098089][T18153] loop1: detected capacity change from 0 to 264192 [ 1570.105374][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1570.128931][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:30 executing program 4: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 17:12:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a1, 0x0) 17:12:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) [ 1570.149115][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1570.163854][ T6566] loop1: unable to read partition table [ 1570.185402][T18153] EXT4-fs (loop1): bad geometry: block count 150995456 exceeds size of device (132096 blocks) 17:12:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 17:12:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000a19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0xa, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 17:12:30 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast1, 0x1}}) 17:12:30 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x400, 0x82) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) r1 = syz_clone(0x142680, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="f827517a8285c51232a0c563f932fa4f3e1cd1fa3b30ea2a991bf60adb662aecc316fdf9a6b8d4e8b29aeb5e84f9dde8543ada8b93debf22f7a02f647a7709693e44072c6859de0618b219de146faa8864f240378b7544445faa8814caa8288b15994e5d6ad1d16d367667a2771232861728d914e372ba863bb25d4285b08a7638e32b226a0292faa0db0312395de230e78a89f37adb8ff406ac246514d223db4d6c9a36d02fc39d697936044061b14ead99fc5d46e1501ca062e0ce75107f1af2d3680ddb8ea8ef6b5415aad9aab77d875c20b64037d24821e654cbf47d") getpgid(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x254400, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r2) syz_open_dev$vcsn(0x0, 0x2, 0x0) 17:12:30 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0, 0x0) [ 1570.353573][T18176] loop1: detected capacity change from 0 to 264192 17:12:30 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:30 executing program 0: syz_open_dev$mouse(&(0x7f0000000000), 0x400, 0x82) syz_clone(0x142680, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x100000000) 17:12:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) 17:12:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) [ 1570.435796][T18176] EXT4-fs (loop1): bad geometry: block count 167772672 exceeds size of device (132096 blocks) 17:12:30 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000c19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:30 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 17:12:30 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x4c000) 17:12:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 17:12:30 executing program 2: syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x181841) 17:12:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8905, &(0x7f0000000300)) [ 1570.644969][T18202] loop1: detected capacity change from 0 to 264192 [ 1570.652249][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1570.689454][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1570.717355][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1570.763400][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1570.796580][ T6566] loop1: unable to read partition table [ 1570.815321][T18202] EXT4-fs (loop1): bad geometry: block count 201327104 exceeds size of device (132096 blocks) 17:12:31 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 17:12:31 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:31 executing program 0: syz_open_dev$midi(&(0x7f0000000040), 0xffffffffffffffff, 0x440) 17:12:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x328, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@lifetime_val={0xfffffdb9}, @replay_esn_val={0x30, 0x17, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @replay_val={0x10, 0xa, {0x0, 0x0, 0x2}}, @offload={0xc}, @algo_aead={0xac, 0x12, {{'aegis128\x00'}, 0x300, 0x0, "7cd2d46bb57ab194f68a68e059a3bc557c940c0aa7133d32903c1ee4cbf962649200ea743679d17e2ebd2b1372c848b19b62ac86e9490d1c61485f2f90ce708d25f4d7a3bd33c16c6b091da61ca4e5661219fba7a22a171063277e3dccd7a04a"}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@private}}]}, 0x328}}, 0x0) 17:12:31 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 17:12:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000d19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:31 executing program 5: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 17:12:31 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000000)="02", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 17:12:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) [ 1571.365210][T18217] loop1: detected capacity change from 0 to 264192 [ 1571.373658][T18216] netlink: 568 bytes leftover after parsing attributes in process `syz-executor.3'. 17:12:31 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1106c4f114dce915, 0x4) 17:12:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 17:12:31 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) 17:12:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) 17:12:31 executing program 5: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) [ 1571.472815][T18217] EXT4-fs (loop1): bad geometry: block count 218104320 exceeds size of device (132096 blocks) 17:12:31 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 17:12:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000f19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:31 executing program 3: syz_open_dev$mouse(&(0x7f0000000000), 0x400, 0x0) r0 = syz_clone(0x142680, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) getpgid(r0) 17:12:31 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 17:12:31 executing program 5: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 17:12:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8000000160001"], 0xf8}}, 0x0) 17:12:31 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045731, 0x0) 17:12:31 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) [ 1571.655272][T18242] loop1: detected capacity change from 0 to 264192 17:12:31 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x0) 17:12:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0xa, 0x0, 0x0) [ 1571.704089][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1571.729906][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:31 executing program 5: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:32 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 17:12:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x60000000}}}, 0xf8}}, 0x0) [ 1571.776734][ T6566] loop1: unable to read partition table [ 1571.804144][T18242] EXT4-fs (loop1): bad geometry: block count 251658752 exceeds size of device (132096 blocks) 17:12:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 17:12:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x60000000}}}, 0xf8}}, 0x0) 17:12:32 executing program 0: syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x0) 17:12:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) [ 1571.969982][T18266] loop1: detected capacity change from 0 to 264192 [ 1571.988244][T18266] EXT4-fs (loop1): bad geometry: block count 268435968 exceeds size of device (132096 blocks) 17:12:32 executing program 0: connect$llc(0xffffffffffffffff, 0x0, 0x0) 17:12:32 executing program 5: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x60000000}}}, 0xf8}}, 0x0) 17:12:32 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @empty}, 0x1c) 17:12:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001119000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000acba21"], 0xf8}}, 0x0) 17:12:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x60000000}}}, 0xf8}}, 0x0) 17:12:32 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17:12:32 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{}], 0x1, &(0x7f0000000600)=[@assoc={0x18}, @iv={0x18}], 0x30}, 0x0) 17:12:32 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) [ 1572.217095][T18289] loop1: detected capacity change from 0 to 264192 [ 1572.238987][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:32 executing program 5: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8907, 0x0) 17:12:32 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@ieee802154, 0xf) [ 1572.278927][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1572.302288][ T6566] loop1: unable to read partition table 17:12:32 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1572.322398][T18289] EXT4-fs (loop1): bad geometry: block count 285213184 exceeds size of device (132096 blocks) 17:12:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 17:12:32 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 17:12:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002002619000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=coi8-r,rodir,iocharset=c']) 17:12:32 executing program 0: getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:32 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000140)="ec", 0x1}], 0x1}, 0x0) [ 1572.504144][T18313] loop1: detected capacity change from 0 to 264192 [ 1572.524140][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:32 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1572.551811][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1572.560778][T18315] FAT-fs (loop3): bogus number of reserved sectors [ 1572.583807][T18315] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1572.586939][ T6566] loop1: unable to read partition table 17:12:32 executing program 0: getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:32 executing program 4: syz_clone(0x142680, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1572.620847][T18313] EXT4-fs (loop1): bad geometry: block count 637534720 exceeds size of device (132096 blocks) 17:12:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004219000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:32 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 17:12:32 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:32 executing program 0: getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) [ 1572.786734][T18332] loop1: detected capacity change from 0 to 264192 [ 1572.808758][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1572.829404][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1572.870566][ T6566] loop1: unable to read partition table [ 1572.878421][T18332] EXT4-fs (loop1): bad geometry: block count 1107296768 exceeds size of device (132096 blocks) 17:12:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x328, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@lifetime_val={0xfffffdb9}, @replay_esn_val={0x30, 0x17, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x8b, 0x0, 0x0, 0x0]}}, @replay_val={0x10}, @offload={0xc}, @algo_aead={0xac, 0x12, {{'aegis128\x00'}, 0x300, 0x0, "7cd2d46bb57ab194f68a68e059a3bc557c940c0aa7133d32903c1ee4cbf962649200ea743679d17e2ebd2b1372c848b19b62ac86e9490d1c61485f2f90ce708d25f4d7a3bd33c16c6b091da61ca4e5661219fba7a22a171063277e3dccd7a04a"}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x3c}, @in6=@private1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@private}}]}, 0x328}}, 0x0) 17:12:33 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x4, 0x0, 0x0}, 0x0) 17:12:33 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) 17:12:33 executing program 0: getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004619000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x33}, @in=@private}}}, 0xf8}}, 0x0) 17:12:33 executing program 0: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), 0xfffffffffffffd56) 17:12:33 executing program 5: socketpair(0x1e, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 17:12:33 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) [ 1573.382291][T18344] loop1: detected capacity change from 0 to 264192 [ 1573.408858][T18346] netlink: 568 bytes leftover after parsing attributes in process `syz-executor.2'. 17:12:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000500)) [ 1573.443581][T18344] EXT4-fs (loop1): bad geometry: block count 1174405632 exceeds size of device (132096 blocks) 17:12:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x33}, @in=@private}}}, 0xf8}}, 0x0) 17:12:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004819000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:33 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='a', 0x4d0}], 0x1, &(0x7f0000000280)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x0) 17:12:33 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@ieee802154, 0x20000180) 17:12:33 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) 17:12:33 executing program 5: socketpair(0x1e, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 17:12:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x33}, @in=@private}}}, 0xf8}}, 0x0) 17:12:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) 17:12:33 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000000)={'veth0\x00', @ifru_hwaddr}) [ 1573.613890][T18361] loop1: detected capacity change from 0 to 264192 [ 1573.629978][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:33 executing program 5: socketpair(0x1e, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) [ 1573.670911][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1573.690100][ T6566] loop1: unable to read partition table 17:12:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x33}, @in=@private}}}, 0xf8}}, 0x0) 17:12:33 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0xe41) write$midi(r0, &(0x7f0000000040)="e4", 0x164db1) [ 1573.713415][T18361] EXT4-fs (loop1): bad geometry: block count 1207960064 exceeds size of device (132096 blocks) 17:12:33 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1}) 17:12:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004a19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000100)={'bridge0\x00', @ifru_data=0x0}) 17:12:34 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 17:12:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004c19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:34 executing program 4: syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x440002) socket$inet6_udplite(0xa, 0x2, 0x88) 17:12:34 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x1}, 0x8) 17:12:34 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:34 executing program 2: socket(0x26, 0x5, 0x8001) 17:12:34 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='a', 0x34000}], 0x1}, 0x0) 17:12:34 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1574.483727][T18391] loop1: detected capacity change from 0 to 264192 [ 1574.520050][T18391] EXT4-fs (loop1): bad geometry: block count 1275068928 exceeds size of device (132096 blocks) 17:12:34 executing program 0: syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 17:12:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:34 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0xfffffffffffffe73, 0x0, 0x0, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x30]}}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) 17:12:34 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) 17:12:34 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:34 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x105082, 0x0) 17:12:34 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:34 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:34 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x810c5704, 0x0) [ 1574.714524][T18410] loop1: detected capacity change from 0 to 264192 [ 1574.732657][T18410] EXT4-fs (loop1): bad geometry: block count 1610613248 exceeds size of device (132096 blocks) 17:12:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006819000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1574.934837][T18424] loop1: detected capacity change from 0 to 264192 [ 1574.955890][ T1835] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1574.974380][ T1835] Buffer I/O error on dev loop1, logical block 0, async page read [ 1574.984129][ T1835] loop1: unable to read partition table [ 1574.996558][T18424] EXT4-fs (loop1): bad geometry: block count 1744830976 exceeds size of device (132096 blocks) 17:12:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, 0x0) 17:12:35 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x400, 0x82) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_clone(0x142680, &(0x7f0000000080)='\fp', 0x2, 0x0, &(0x7f0000000100), &(0x7f0000000140)) getpgid(0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x254400, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000300)=0x1000005) 17:12:35 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:35 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x12f083, 0x0) 17:12:35 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x105082, 0x0) 17:12:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006c19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x328, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast}}, [@lifetime_val={0xfffffdb9}, @replay_esn_val={0x30, 0x17, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1]}}, @replay_val={0x10}, @offload={0xc}, @algo_aead={0xac, 0x12, {{'aegis128\x00'}, 0x300, 0x0, "7cd2d46bb57ab194f68a68e059a3bc557c940c0aa7133d32903c1ee4cbf962649200ea743679d17e2ebd2b1372c848b19b62ac86e9490d1c61485f2f90ce708d25f4d7a3bd33c16c6b091da61ca4e5661219fba7a22a171063277e3dccd7a04a"}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@private1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@private}}]}, 0x328}}, 0x0) 17:12:35 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:35 executing program 3: syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="f827517a8285c51232a0c563f932fa4f3e1cd1fa3b30ea2a991bf60adb662aecc316fdf9a6b8d4e8b29aeb5e84f9dde8543ada8b93debf22f7a02f647a7709693e44072c6859de0618b219de146faa8864f240378b7544445faa8814caa8288b15994e5d6ad1d16d367667a2771232861728d914e372ba863bb25d4285b08a7638e32b226a0292faa0db0312395de230e78a89f37adb8ff406ac246514d223db4d6c9a36d02fc39d697936044061b14ead99fc5d46e1501ca062e0ce75107f1af2d3680ddb8ea8ef6b5415aad9aab77d875c20b64037d24821e654cbf47d") [ 1575.498834][T18431] loop1: detected capacity change from 0 to 264192 [ 1575.536285][T18431] EXT4-fs (loop1): bad geometry: block count 1811939840 exceeds size of device (132096 blocks) 17:12:35 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x16f) 17:12:35 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}], 0x1, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002007419000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1575.618568][T18441] netlink: 568 bytes leftover after parsing attributes in process `syz-executor.4'. 17:12:35 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x105082, 0x0) 17:12:35 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x402020) 17:12:35 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}], 0x1, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 17:12:35 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0x2, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 1575.731577][T18449] loop1: detected capacity change from 0 to 264192 [ 1575.750767][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1575.766611][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={0x0, 0x0}) 17:12:36 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="e4", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000000000002000000010000000000000011000000000000000000000001000000790000000000000048"], 0x78}, 0x0) 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}], 0x1, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1575.826908][ T6566] loop1: unable to read partition table [ 1575.840450][T18449] EXT4-fs (loop1): bad geometry: block count 1946157568 exceeds size of device (132096 blocks) 17:12:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002007a19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:36 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x8) 17:12:36 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x105082, 0x0) 17:12:36 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000000), 0x1bc8, 0x0) 17:12:36 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x80a41) write$midi(r0, &(0x7f0000000040)="e4", 0xfffffdef) 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:36 executing program 4: r0 = socket(0x2, 0x5, 0x0) accept(r0, 0x0, 0x0) [ 1576.030442][T18471] loop1: detected capacity change from 0 to 264192 [ 1576.069428][T18471] EXT4-fs (loop1): bad geometry: block count 2046820864 exceeds size of device (132096 blocks) 17:12:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', 0x0}) 17:12:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200aa19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) [ 1576.140714][ T6566] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:12:36 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x142680, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, 0x0) getpgid(0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1576.237359][T18487] loop1: detected capacity change from 0 to 264192 [ 1576.274238][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x7fff}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:36 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000340)) [ 1576.295043][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1576.327381][ T6566] loop1: unable to read partition table 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1576.365300][T18487] EXT4-fs (loop1): bad geometry: block count 2852127232 exceeds size of device (132096 blocks) 17:12:36 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x48, &(0x7f0000000080)={0xdb, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200ca19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:36 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xa, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:36 executing program 2: syz_open_dev$dri(&(0x7f0000000280), 0x7, 0x0) 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x7fff}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:36 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:12:36 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x1, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x7fff}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) [ 1576.755708][T18513] loop1: detected capacity change from 0 to 264192 17:12:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x0, "e357ea"}) [ 1576.803889][T18513] EXT4-fs (loop1): bad geometry: block count 3388998144 exceeds size of device (132096 blocks) 17:12:37 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x40000}, 0x0) 17:12:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0xc0}}, 0x0) 17:12:37 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x1, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200d319000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:37 executing program 0: syz_clone(0x1010300, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x7fff}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) 17:12:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0x5, 0x0, 0x0) 17:12:37 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x1, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:37 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 17:12:37 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, &(0x7f0000000000)) 17:12:37 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x2}, 0x90) [ 1577.030590][T18538] loop1: detected capacity change from 0 to 264192 17:12:37 executing program 3: r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 17:12:37 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1577.090171][T18538] EXT4-fs (loop1): bad geometry: block count 3539993088 exceeds size of device (132096 blocks) 17:12:37 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000040)) 17:12:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200fe19000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:37 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x78}, 0x0) 17:12:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0xf0}}, 0xf8}}, 0x0) 17:12:37 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000340)=0x4) 17:12:37 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x2041) write$midi(r0, &(0x7f0000000040)="e4", 0x1) 17:12:37 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 17:12:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0xf0}}, 0xf8}}, 0x0) [ 1577.291022][T18561] loop1: detected capacity change from 0 to 264192 17:12:37 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:37 executing program 3: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) 17:12:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0x64, 0x0, 0x0) [ 1577.366984][T18561] EXT4-fs (loop1): bad geometry: block count 4261413376 exceeds size of device (132096 blocks) 17:12:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001d000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:37 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0xf0}}, 0xf8}}, 0x0) 17:12:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) 17:12:37 executing program 3: socket(0x27, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0xf0}}, 0xf8}}, 0x0) 17:12:37 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1577.539127][T18583] loop1: detected capacity change from 0 to 264192 [ 1577.574519][T18583] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1577.592892][T18583] EXT4-fs (loop1): get root inode failed [ 1577.600595][T18583] EXT4-fs (loop1): mount failed 17:12:38 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_hwaddr}) 17:12:38 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) 17:12:38 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, 0x0) 17:12:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:38 executing program 4: syz_clone(0x9c2680, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000020000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x6c}, @in=@private}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1578.204672][T18600] loop1: detected capacity change from 0 to 264192 17:12:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000000040)=@expire={0xec4, 0x18, 0x0, 0x0, 0x0, {{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private2}, @in6=@empty}}, [@lastused={0xc}, @algo_comp={0x91, 0x3, {{'lzs\x00'}, 0x248, "2cfc5af312fcfebe79a0e1c9aabc76fb5844fbb8dbdf13cab9591372dc05ae4d6a819eae8bddfeb34622f7f717ffa00192c9daaace3d82b10ca6f93937f8bbed3762845a7435db85eb"}}, @algo_crypt={0xd29, 0x2, {{'cbc-camellia-aesni\x00'}, 0x6708, "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"}}]}, 0xec4}}, 0x0) 17:12:38 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) 17:12:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x135c}}, 0x0) 17:12:38 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00']}, 0x18) 17:12:38 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) read$usbmon(r0, 0x0, 0x0) [ 1578.320880][T18600] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1578.391593][T18600] EXT4-fs (loop1): get root inode failed [ 1578.404725][T18600] EXT4-fs (loop1): mount failed 17:12:38 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 17:12:38 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x80a41) write$midi(r0, &(0x7f0000000040)="e4", 0x1) 17:12:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8918, 0x0) 17:12:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200003d000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:38 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x0) 17:12:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:12:38 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x1131c0) 17:12:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1578.595811][T18634] loop1: detected capacity change from 0 to 264192 17:12:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0x64, 0x0, 0x300) [ 1578.652880][T18634] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1578.679983][T18634] EXT4-fs (loop1): get root inode failed [ 1578.688492][T18634] EXT4-fs (loop1): mount failed 17:12:39 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x20000410) 17:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 17:12:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast1}}) 17:12:39 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001100)) 17:12:39 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200003f000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x6c}, @in=@private}}}, 0xf8}}, 0x0) 17:12:39 executing program 3: r0 = syz_open_dev$mouse(0x0, 0x400, 0x82) r1 = syz_clone(0x142680, &(0x7f0000000080)="0c703d7c7ea98a10886886eb59cb4e272803a3286101bcc4578833e9e536", 0x1e, &(0x7f00000000c0), &(0x7f0000000100), 0x0) getpgid(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x254400, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) 17:12:39 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1579.269512][T18653] loop1: detected capacity change from 0 to 264192 17:12:39 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x0, 0x1c0000) read$midi(r0, &(0x7f00000000c0)=""/183, 0xb7) 17:12:39 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x181082, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) 17:12:39 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xfffff714) [ 1579.328871][T18653] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xd, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:39 executing program 4: r0 = socket(0x27, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), r0) [ 1579.396035][T18653] EXT4-fs (loop1): get root inode failed [ 1579.403589][T18653] EXT4-fs (loop1): mount failed 17:12:39 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000040000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:39 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x101000) 17:12:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8916, 0x0) 17:12:39 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) 17:12:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xd, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 17:12:39 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1579.563248][T18683] loop1: detected capacity change from 0 to 264192 [ 1579.576405][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:39 executing program 4: r0 = socket(0x25, 0x5, 0x0) read$alg(r0, &(0x7f0000000000)=""/238, 0xee) 17:12:39 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xd, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:39 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 17:12:39 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18}], 0x18}, 0x0) [ 1579.609330][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1579.617301][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:39 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 1579.665497][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1579.698793][ T2968] loop1: unable to read partition table [ 1579.738207][T18683] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1579.768951][T18683] EXT4-fs (loop1): get root inode failed [ 1579.784115][T18683] EXT4-fs (loop1): mount failed 17:12:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200fffe000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:40 executing program 4: syz_clone(0x346680, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:40 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xd, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0xf) 17:12:40 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:40 executing program 2: socket(0x1, 0x0, 0x9) 17:12:40 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:40 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) [ 1579.968100][T18714] loop1: detected capacity change from 0 to 264192 [ 1579.972869][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1579.997744][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:40 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) [ 1580.026715][ T6566] loop1: unable to read partition table [ 1580.047111][T18714] EXT4-fs (loop1): bad geometry: block count 4278190592 exceeds size of device (132096 blocks) 17:12:40 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2a, &(0x7f0000000080)={0xdb, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:40 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 17:12:40 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:40 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, 0x0) 17:12:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000ff000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}}}, 0xf8}}, 0x0) 17:12:40 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0x6, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8936, 0x0) 17:12:40 executing program 4: syz_open_dev$mouse(&(0x7f0000002900), 0x1800000000000, 0x34601) [ 1580.575185][T18731] loop1: detected capacity change from 0 to 264192 [ 1580.611566][T18731] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:40 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(0x0, 0x0, 0x0) 17:12:40 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) [ 1580.632175][T18731] EXT4-fs (loop1): get root inode failed [ 1580.638000][T18731] EXT4-fs (loop1): mount failed 17:12:40 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 17:12:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0x2}}, 0xf8}}, 0x0) 17:12:40 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x254400, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sched_rr_get_interval(0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) clock_gettime(0x1, &(0x7f0000000300)) 17:12:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000000020000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:40 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(0x0, 0x0, 0x0) 17:12:41 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) [ 1580.854998][T18755] loop1: detected capacity change from 0 to 264192 [ 1580.867012][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:41 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(0x0, 0x0, 0x0) 17:12:41 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 17:12:41 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x50040) 17:12:41 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x1e1200) [ 1580.903052][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read 17:12:41 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff000000000000000000000000000000d4"], 0x1ec) [ 1580.950883][ T6566] loop1: unable to read partition table [ 1580.999042][T18755] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1581.054824][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.062933][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.067235][T18755] EXT4-fs (loop1): get root inode failed [ 1581.074369][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.081452][T18755] EXT4-fs (loop1): mount failed [ 1581.107461][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.115413][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.123205][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.132140][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.147379][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.155281][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.188783][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.196746][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.204283][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.212328][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.221944][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.232732][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.242043][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.249730][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.257120][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.264865][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.272325][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.281010][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.288455][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.295965][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.303762][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.311286][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.318699][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.326197][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.333643][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.341150][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.348550][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.356018][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.363497][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.370982][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.378489][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.385987][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.393434][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.400906][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.408333][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.415807][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.423318][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.430838][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.438274][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.445824][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.453327][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.460901][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.468304][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.475772][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.483256][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.490785][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.498207][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.505680][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.513174][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.520703][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.528104][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 17:12:41 executing program 3: socket(0x22, 0x0, 0x7) 17:12:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890c, &(0x7f0000000300)) 17:12:41 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\v'], 0x1ec) 17:12:41 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280), 0x0, 0x0) 17:12:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000000040000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1581.535559][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.543131][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.550646][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.558086][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.565604][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 17:12:41 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 17:12:41 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x30002, 0x0) [ 1581.596581][T18775] loop1: detected capacity change from 0 to 264192 [ 1581.603409][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 17:12:41 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280), 0x0, 0x0) 17:12:41 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 1581.639881][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.672788][T18775] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) bind$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @empty}, 0x1c) [ 1581.694599][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 17:12:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8906, 0x0) [ 1581.746229][T18775] EXT4-fs (loop1): get root inode failed [ 1581.752729][T18775] EXT4-fs (loop1): mount failed [ 1581.754675][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.826790][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.844556][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.857825][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.865943][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.873531][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.881625][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.889122][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.896712][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.904310][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.912252][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.919845][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.927341][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.934956][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.942704][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.950276][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.957748][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.965288][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.972773][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.980291][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.987733][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1581.995220][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.002703][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.010193][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.017636][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.025263][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.032817][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.040366][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.047814][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.055321][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.062855][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.070370][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.077871][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.085365][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.092939][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.100438][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.107835][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.115312][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.122765][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.130282][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.137679][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.145186][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.152637][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.160120][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.167525][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.175007][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.182595][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.190096][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.197516][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.204997][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.212463][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.219936][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.227346][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.234876][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.242343][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.249791][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.257199][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.264723][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.272199][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.279671][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.287076][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.294539][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.301986][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.309446][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.316860][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.324344][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.331832][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.339493][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.346901][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.354393][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.361902][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.369380][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.376778][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.384266][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.391776][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.399167][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.406669][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.414151][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.421610][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.428988][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.436460][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.443934][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.451387][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.458786][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.466302][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.473785][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.481309][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.488737][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.496245][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.503733][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.511229][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.518630][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.526163][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.533665][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.541185][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.548593][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.556064][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.563497][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.571004][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.578416][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.585921][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.593383][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.600882][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.608280][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.615760][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.623355][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.630863][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.638261][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.645855][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.653419][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.661579][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.669089][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.676741][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.684375][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.691997][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.699648][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.707054][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.714513][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.722022][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.729525][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.737006][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.744556][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.752218][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.759736][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.767141][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.774590][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.782038][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.789495][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.796901][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.804372][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.811805][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.819394][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.826806][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.834302][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.841745][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.849132][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.856613][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.864074][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.871530][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.878917][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.886381][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.893906][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.901501][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.908904][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.916526][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.924130][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.931735][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.939125][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.946690][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1582.954237][T31331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 17:12:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=coi8-r,rodir,iocharset=']) 17:12:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) 17:12:43 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='B'], 0x16f) 17:12:43 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280), 0x0, 0x0) 17:12:43 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xc7c4, "ea760e3263eadceadbea1d7bbb817ef02562b4b2b7369eae2437a901953a1617"}) 17:12:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001d000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1582.978002][T31331] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 17:12:43 executing program 3: syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x260000) [ 1583.024499][T18798] loop1: detected capacity change from 0 to 264192 17:12:43 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 17:12:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x174, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_aead={0x4c, 0x12, {{'aegis128\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}]}, 0x174}}, 0x0) 17:12:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 1583.069023][T18804] FAT-fs (loop4): Unrecognized mount option "iocharset=" or missing value 17:12:43 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 17:12:43 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r0, 0x1ff, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) [ 1583.134045][T18798] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1583.178124][T18798] EXT4-fs (loop1): get root inode failed [ 1583.184468][T18798] EXT4-fs (loop1): mount failed 17:12:43 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x5) 17:12:43 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) 17:12:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x10e, 0x2, 0x0, 0x0) 17:12:43 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 17:12:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200003d000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:43 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "ea760e3263eadceadbea1d7bbb817ef02562b4b2b7369eae2437a901953a1617"}) 17:12:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)) 17:12:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1}}) [ 1583.396183][T18827] loop1: detected capacity change from 0 to 264192 17:12:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0) 17:12:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) 17:12:43 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)='8', 0x7ffff000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x40) poll(&(0x7f0000000280)=[{}], 0x1, 0x0) 17:12:43 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) [ 1583.438940][T18827] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1583.470374][T18827] EXT4-fs (loop1): get root inode failed [ 1583.478639][T18827] EXT4-fs (loop1): mount failed 17:12:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x1a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:43 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x81, 0x0) 17:12:43 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000002ac0)={{0x77359400}, {0x77359400}}, 0x0) 17:12:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000fe000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:43 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4000}, 0x90) 17:12:43 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x88202, 0x0) write$midi(r0, &(0x7f00000002c0)="373b90a059a722abb396b2dc9d6def816710d0b6059755a42fbc130d0b64ef83c6304ef6ceaf8bbe014094bfc569645910a71902e54e7b21dfdd826dcfe829c7951845903cc47437cca8fc85ddfb15814e85e3f3a186d7cab2ff0b21aceea65bf56440e99d7bbadbfe802dc6759e4e7720f564c17ea3892314d6a84bde9b3454a58ded16315c6980aac1332fec032232591124e9fd2182e93ea7d70a", 0x9c) [ 1583.572323][ T6566] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:12:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1}}) 17:12:43 executing program 4: socket(0x27, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x18, 0x15, 0x0, 0x0, 0x0, {0xa, 0x18}}, 0x18}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) 17:12:43 executing program 2: syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0) 17:12:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1}}) 17:12:43 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000280)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x0) 17:12:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x328, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@lifetime_val={0xfffffdb9}, @replay_esn_val={0x30, 0x17, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x8b, 0x0, 0x0, 0x0]}}, @replay_val={0x10}, @offload={0xc}, @algo_aead={0xac, 0x12, {{'aegis128\x00'}, 0x300, 0x0, "7cd2d46bb57ab194f68a68e059a3bc557c940c0aa7133d32903c1ee4cbf962649200ea743679d17e2ebd2b1372c848b19b62ac86e9490d1c61485f2f90ce708d25f4d7a3bd33c16c6b091da61ca4e5661219fba7a22a171063277e3dccd7a04a"}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@private1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@private}}]}, 0x328}}, 0x0) [ 1583.685921][T18856] loop1: detected capacity change from 0 to 264192 17:12:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, &(0x7f0000000040)="953c8deac570d9dc7f", 0xfffffffffffffeb5, 0x448c4, &(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) 17:12:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:44 executing program 0: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) [ 1583.742150][T18856] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1583.775517][T18856] EXT4-fs (loop1): get root inode failed [ 1583.781477][T18856] EXT4-fs (loop1): mount failed 17:12:44 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0385720, 0x0) 17:12:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000feff0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) [ 1583.833236][T18873] netlink: 568 bytes leftover after parsing attributes in process `syz-executor.5'. 17:12:44 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x82) syz_clone(0x142680, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 17:12:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0x8, 0x0, 0x0) 17:12:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x1}}) 17:12:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) [ 1583.937766][T18881] loop1: detected capacity change from 0 to 264192 [ 1583.977888][T18881] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1584.007647][T18881] EXT4-fs (loop1): get root inode failed [ 1584.019598][T18881] EXT4-fs (loop1): mount failed 17:12:44 executing program 2: mbind(&(0x7f00008e9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x6, 0x7fff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x0) 17:12:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) 17:12:44 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 17:12:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x328, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@lifetime_val={0xfffffdb9}, @replay_esn_val={0x30, 0x17, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0]}}, @replay_val={0x10}, @offload={0xc}, @algo_aead={0xac, 0x12, {{'aegis128\x00'}, 0x300, 0x0, "7cd2d46bb57ab194f68a68e059a3bc557c940c0aa7133d32903c1ee4cbf962649200ea743679d17e2ebd2b1372c848b19b62ac86e9490d1c61485f2f90ce708d25f4d7a3bd33c16c6b091da61ca4e5661219fba7a22a171063277e3dccd7a04a"}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@private1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@private}}]}, 0x328}}, 0x0) 17:12:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000feffffff600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1584.691247][T18897] loop1: detected capacity change from 0 to 264192 [ 1584.711684][T18902] netlink: 568 bytes leftover after parsing attributes in process `syz-executor.5'. 17:12:44 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000440)={0x8, {"3bfe46fc81830369ee48287fc14b631f064730691c3e36581550b7343ddb35d94ac10c1a9e63c60e413dcdc00a3c83904714cf1bc62bcc3d06b83593e4e4c8a966261da49b76404dd2bdce8ac03b5394e58a38daa4c07548639bd80ebe810076652581ae10e400a5b1fb0fceee307dc3dc318f70dc06b2319ee4dc1b8acdd23dc56145df3b93887ddff149ee3334f05bd200b9a2bbd81de5e5fd385a150e2764643df9f3814e1e11c006ab13da42befb0fa2f393ae03c3f31141cfbc92a90b0303847708a275b4ebba0fda7e1b305d18dc2e2bad8a758ca256183d1439a256b9366bbaaf458919a9f78e0c86701b8df1ac6a6a77ceb0cb2f2a1af28b8cc0ae002ef5741210c63dea2ddffa49c09f26a02401aee6009e84a2804a8bd41af24557011ffefd002eefc2389527964cec6c3dbd1e688983a3563c1b7d6803f303f023dea684fc4e89bc1b78ae2a01ebd7694a18ac40d05492126447cbb920dfd7d72f14805fc91aedfd68dd23151fbeeee4164b587f370675eda8b8e7db9a28bd35ba1b48174cb21bafb9aacf3288dfbf56a35d126445c44b13ea1e6937444d1debf2bc9ef3497a5a3035a6690f3cc2681e7575c3834ff52cafec610f953a7ff356798ff07600be0852d3e33ef53586387b073191687bdea1ec4aa300d78dffb1aa85edcb8d1fc702bfe2cfdfaeaedcb73992b5384dea38c13cdb06a0d3ba21c902adbe92bad04ba2563fc2fc7187c71de1f9f28aea2b421cd0f2f7055579dc11042cb44f98a7c1df2ad8348f05704fa1746d36fd60d7b7c719a3478c56bebc497c582a67b99abad9b96cd6a8b4b420f69a8c239866fb8a60045e91893445f43e92a4495ea8c25357fb01ac704a7a6c43f6dd7745e97b07504613b9945752faf3c72ed757731e9bcc832ee586a8e5d6ac4e7cceeb63de787f58b672e062176ca869bdc97bb7ffbb0499e5a7edf4f87fa0b1d07cf479980aefa293d17f77cdbec3de839af6729434f6d261e770dd836afcb633ab1e6152067139f1b8c05a8002587541697770a40f661ecb3bedee0ac2f00d7c86a76e48f8e5e8a5e00839c3bd041b9ecfaf2ccf3856d2fce1b1b3adfde0c41250b22668d40e95688091b90430d320e47e6a928da1f7078b02d28470aa3a29e05be0fd221c4d8181f171a43f12a65baad9f0aca660d17111325412c7d9493a28c295df884b8609e386c8344174cff6c88198ab76c2c84b323d8cd3f5e51bdeb7a6f745a861d8f97c4b3744646cb29af8fd7543e9a9f7137ea8e02ba43e6730854c40e1f6c1f1099eac4d8a9be9c7cf2c2352e7b267359ad0649ce14deed5f381690a4b0b92ce68e0b0600ed4cf56d0c550dbbd9385085780b7e69e35bca2da29dc1a2e7809219e8b49c30b0541a0b7d17cc26b146db62ae4c0eb48393f59fbd353cebc34ef22513d3573313c27ade2c91b7af1e8a3281b8e0fef45fc2bdb7a906253ff22fce843340b76ec33a054595402c6b2e57027e279a675c73f3dabda5276e7e5702e8e41ab8bd95f842255c017ace8ffc524dc3051609f2081f64c3811e327dbe5679cac77b2050e3390dcf7f9bb7c662a2aa2c5cbe0f84ffb5e56c8e9536cc4ee9292ba43379306b006e94793073e9f06888cb02e0c51a79406e11fd1f65e4dfab1c39b5b0aff9fe8edbac05bec06db9ccf7a5edf476001aa928453f3c58a4e72136b932c5a99e1d68c817a3de011cd9e638ecf1450fbdb7a18c634480b3a57c5e4cb1b11150e39992983d1b1814f38ca458c4f8411f2a9e1b1901c86bcdfa0e493c66c9dc42202b4e2a916c44e0bce77398808f82b2a6bb1dcd87e5fbe9412fbd746bcec0d87bd03c00a5f1487d4e73319ce4a2ba5e8fa5630568804736418b956aa189a3900f5ca97b3ed44c9e78bf4d74d5a7c987ae321742fd247bf1b30f7ab0d8110599963dd8512eb08c010f6133c3a998e2865b20c1355ee47abe2e53a38bf0a455c99fd7fcf7f3a4753e5f966e59a1ebd15bb04b1eb30c9a2730461bb54090da1a0b090ba3b628cf9c1a205adcc22d4cdaf1cc6793228e383f1cb8e2622d95ee5a87ba17679884dd58c7100113a5e9dd1b82d8ec7f16a38203526ba2e775d0a1b4c9560482cb3bf32bd4e2401bdf74ac3f240b277015a091df26246f9bb4e2bfbd19b8d93a981bd40d9a49207192d96d039a670f18ad52b7fce99166046a269b95939ff3b07ad9ecf3b7c2898032fc673d3acbc79a69a333b2fb64df054b85993eeb0ee3cf6e72804c7de78866f818fd885813a352392864012861c7b17288a8fefc9b60bcf57f9edc1b003d420c69c90009e968fb9ffa34d5cbf32f3fc7f6fa505149952606da9f10d5ec756621b38b0bb24d83a2baad1b12e395627f42745a996753f2606ab48768b73ca8698845b6d41c031860674736f209c886c4a799986d2be5056552a219fff57f5b9c8e7a43eddf877ffcc4272a141506093a3f4a1d564bfdd94b039fe405fd42c42ba278b166cf42a67294c84b6900a48d5c4595254c39129a032c1b6f524cdfe1574192e725cd3461f17fd7582ca2716a573ac59f0691b7cfc7204130b919b3879ee15b7bab534b418023cf6a90992420c641f41dc810c46e6fd774cb48a6780927da43c6a859891a0cc136de5e467c20b4cdb1e53fb88361cdf3957d54ce0fd55041f21b6ba5b7a93e44db6b882d3acdb1adcb3aa17bea2569918142a2243f34cc147aa148eff6bc9a8e9721c5526171d017ab672b1b1ee70ed18ee9b98b92d2e754fa3dd247a97b456d9f30791bc6b75931a95b507a49db799f27c337f16b0c4a7e407c1ec85ca64ab4371cd81e5922e79d32d01d8db78467e0789c5863ab7452dc2b2b7916870c8c57adb7244c090814cc7c92bc6fcae65c9b545465895b815f7992601718a0a5bc81644a7c1b3f421eed2fed6eefd49c0a865d201f4cb385004117e121ef7e26d67ab2448324bcab0d6f8300350167de1cbc26eb4f72d94ff04aee3331c3483474006943e17d0613ce1a8a00d06132b3b2289544789766fdc39e3ac58f96b79c0f20ab8256f624044f76dd97af0ba978241831cf134ab6cb00ae04f8656d43848f1cc5343e16f3447041bda99c47d3c62b0d1ed39fbcdad879e90533bf3ebe6110374590021b434455700df93a7da86660c50c6b4b895908b3c30aa96539e3357b73c3fd9f3b20aad4416890cd685d72bd155347f2c493bf449b284e825b115a3f050b9b8ffdd62ac6c726c482cd18f77740df067e60f462806a7350aecf883b5d93c2565e3e102038e911ff9c0c1e06085eab644ffb76cbd089311dcce65fd16021b061352545edc45a6e7e2d1fb8c93a666eb841c5e8e84d7620f9cf77a7da62e4f78ffbf400359595602a6c546d5b609f6fcb90b15e6d5550f1bfce14c334338970c1e6e9f1ce38992d315737668ebc405164ac1a7dc2f59ae288eafa5d299bf372c268477b8d0cf4bbcd1939dbb35bf3d81deab6102b1ec41866031561d08761eb6d1a1bed9f963bce44fc32908c64a5a49a5e11f0a386478b699ef226e6ab4c30849886570aa67f0dac254f6f5cd6fcb67621ce7ffcbf4ef2b180c414e801443728aa643663d6fff243599142103bcdfec51712c0bd8fb105090c3c386e650671482235184da429b5c3cae8aaf1ca75670a57c93a6aae896530c7e8b258ca3f7b8372a91e5e5903594e9b746ac7c1e8ce08d4e099a8b9ff75d784b42c4510d82d83044ace0da4ca18dd599a6e0475c7396d1957756faf27f587330cfa29dcc4d9dbd6c0037d5a854e609f92a0cdca80a9900e9a7ef20f507a5f10d56e3cf97e94e48968b57b2288ab278a42c869d5c2deb24541877bc7eb27fd90617e4fb3c547b98ae0d9de45a8c4f8c745c914091ca654047119b12dc0f14debb3de9fbd00380b808226302a63ef3a65386a5afedd1b43cf5f4167b8bb77731978d3ee699c20f48d2512e03e7cf88ef9548a4ff51027d6e5753cb05cec33b18208025247716df0e06a57162d8daa4f86b492a9236171ccd18b3dcc10aed32b0dbe2e16659e72f64578641eac171a3299155b7f7e2d877e48165862f98141eba9acdea9ccdd744df6ab1b607fe0b3f8a4adbba395ffee9be3f8bd5e68282ab79ce1d5bba8481d979b2987be48c12791834112f288882929c75d8bd3f68b931b46ef6410ff7af1eeb54488434c6dcea77ed9ae98935826d6aa724102f143727a9f322d3b5edd42daa655772d01280594420dbcdedf1390d87ae95e3f3f4758830d9a89fc9d79de9d4df63f424a5b02588542328ae01e74e4160e451bdb1cecca24b262064e71af739b4adc4e6c748880ace53c2fe231ba0bba9d5031a456d30ba46b2511a1e08d31e2d314d2ec2b212ff412946707ec1bcc12d11ded6db8e74931bd9b3de553e61a432885e44b1e4b086a7d0af5032c0494c4b575236daec8ab06be0d6cb3b54621d28e7a3f62fbc4ab8cebbd0a77cb929b60c768ab1174f9b024dd0c10ba174800c10c4661781dfbe5a037e390210f427560d5842637bdf1ef7a45a9ed31f40babc2e5abe4e75fda3e9fb1a735f9cd83c6df5efd3232b245536b9b2ecf70c0eb3b21787ff5cd1a20dc04fd469302883a6c322bb52644f6bf48a14c2799a3b8ff77a87e56a8b48da7e815be68448d3709ed37ccf84e92c4aa233df38f2bf974f2fe4cdb8977947634771cfd2c37d92d23f4b522b69429947218f21b34eff539fb34fc847b95da794faa517d7f3e3e584491b2fc8432a3dd791cd3c2b241774fe7ac4e391138415ce35c81ac089a1af0a7b56984804e9fb28164814e5b6491342081b9e7a5a390562dc1ff90fe028cdb9c2ba71f3ed71b96bd46b39f4e048bd5bc7305b7ed9628cbc47074b7762f722bd4198c0ed867105b3909a3de5e593e940597fdd4e4303d51e08b04d5b5280ab97243b22b48a576294b73db6e5b74037e0b8a71fabf6d22e6bae9f1174ec4bf5f5cdf33eec6d82de7d1cdbddab8eedb202fd585b9ea0de76c984299b43ea011dcd2c6c534525d345798fed789cf57cf7f25cf31b00044ac616c18fcdc9c1284205bad708dde8acb16f0d3b93a387b151c07da5a3c4fb7cc3f28b426aefa14039602661e5ab3aadd32fc4d34db7a1ca80ce59297f24ece9db6360e5f165da25fec240daa9354fc452e17180ee3b2570bca6442f035d2ecc318432e49bd6e4d964b4fdb2f0a195a0a7361d22d24a2aff30a1d7efebbf21b023cc6b16947f645f097a1df5413a55b5f0005062e0ff56b836846274211e313755b53a376aed351753338da4d630841df05fce749123278ed40eb54d23c5abba13ac4c86f9878d33f96096c41ea95c0e21ca6dfb6fd27f8dbf7502ddb7a404ef619dd8205917ae9fe2d9590ab19d011bbd94c028833a170a42d78a5bc711939ad1e9638a08ebfc9154335f51e2ef242f6e1b4c7b42bac0ce37f5b7d15e083ab94ebe2f5d0ffdd3b034f883a061f5294be7b77c9f04e489dcd030dbae475037828851b120bad2ff753b1fa2d5f8030e19337d963f1de42572752da60d9240af97289a534153b1b8b843fcf2965a6d9fc71353135497e9d637791804c5f9aaff3c34a2db34fac52d108379bc07b82fe95f87b49aa742b897d85e833f008755be6a8326c86b236aa105c2b2dafabd26072d606cfd4e1d2037485a5c4f2b1f316a8a80cc7ec784714bf54797c8264011366525e817867adacf4a8fc191f243f70be8ca68d1b973d2caa24b000ec2ca3d1509a3f13715053eaa98e03b583659f5a1d739c6440e83d6bac3a16713ac", 0x1000}}, 0x1006) 17:12:44 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x101000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 17:12:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0x9effffff}}, 0xf8}}, 0x0) 17:12:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}}, 0x0) [ 1584.741676][T18897] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:45 executing program 4: r0 = socket(0x27, 0xa, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x18, 0x15, 0x0, 0x0, 0x0, {0xa, 0x18}}, 0x18}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x101000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), r0) 17:12:45 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000000000002000000010000000000000011000000000000000000000001000000790000000000000048"], 0x78}, 0x0) 17:12:45 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) [ 1584.843213][T18897] EXT4-fs (loop1): get root inode failed [ 1584.858259][T18897] EXT4-fs (loop1): mount failed 17:12:45 executing program 0: syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x260000) 17:12:45 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x80a41) write$midi(r0, 0x0, 0x0) 17:12:45 executing program 4: syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 17:12:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000004000100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:45 executing program 3: syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x2) 17:12:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000100)={'bond_slave_0\x00', @ifru_data=&(0x7f00000000c0)="6f8eac8acc68751bab5a0550fdb388c23e42642a21ca000400000000000024cf"}) 17:12:45 executing program 5: syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x80c00) 17:12:45 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x142680, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 17:12:45 executing program 4: syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x0) 17:12:45 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, &(0x7f0000000080)="0c703d7c7ea98a10886886eb59cb4e272803a3286101bcc4578833e9e5", 0x1d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="f827517a8285c51232a0c563f932fa4f3e1cd1fa3b30ea2a991bf60adb662aecc316fdf9a6b8d4e8b29aeb5e84f9dde8543ada8b93debf22f7a02f647a7709693e44072c6859de0618b219de146faa8864f240378b7544445faa8814caa8288b15994e5d6ad1d16d367667a2771232861728d914e372ba863bb25d4285b08a7638e32b226a0292faa0db0312395de230e78a89f37adb8ff406ac246514d223db4d6c9a36d02fc39d697936044061b14ead99fc5d46e1501ca062e0ce75107f1af2d3680ddb8ea8ef6b5415aad9aab77d875c20b64037d24821e654cbf47d886e0de6fce8a38136dd31") ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$vcsn(0x0, 0x2, 0x40) 17:12:45 executing program 0: r0 = socket(0x25, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) [ 1585.065115][T18930] loop1: detected capacity change from 0 to 264192 17:12:45 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x82) syz_clone(0x142680, &(0x7f0000000080)="0c703d7c7ea98a10886886eb59cb4e272803a3286101bcc4578833e9e536", 0x1e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="f827517a8285c51232a0c563f932fa4f3e1cd1fa3b30ea2a991bf60adb662aecc316fdf9a6b8d4e8b29aeb5e84f9dde8543ada8b93debf22f7a02f647a7709693e44072c6859de0618b219de146faa8864f240378b7544445faa8814caa8288b15994e5d6ad1d16d367667a2771232861728d914e372ba863bb25d4285b08a7638e32b226a0292faa0db0312395de230e78a89f37adb8ff406ac246514d223db4d6c9a36d02fc39d697936044061b14ead99fc5d46e1501ca062e0ce75107f1af2d3680ddb8ea8ef6b5415aad9aab77d875c20b64037d24821e654cbf47d886e0de6fce8a38136dd315dec43") 17:12:45 executing program 4: r0 = socket(0x25, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) [ 1585.119284][T18930] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1585.144102][T18930] EXT4-fs (loop1): get root inode failed [ 1585.158608][T18930] EXT4-fs (loop1): mount failed 17:12:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x0, "52f21c", 0x5, 0x3a}) 17:12:45 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 17:12:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000200100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2}, @in=@private}}}, 0x33fe0}}, 0x0) 17:12:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 17:12:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@mcast2}, {}, {}, 0x0, 0x6e6bbd}}}, 0xc0}}, 0x0) 17:12:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x20c, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@private1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@private}}]}, 0x20c}}, 0x0) 17:12:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) 17:12:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x328, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@lifetime_val={0xfffffdb9}, @replay_esn_val={0x30, 0x17, {0x5, 0x0, 0x70bd2b, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @replay_val={0x10}, @offload={0xc}, @algo_aead={0xac, 0x12, {{'aegis128\x00'}, 0x300, 0x200, "7cd2d46bb57ab194f68a68e059a3bc557c940c0aa7133d32903c1ee4cbf962649200ea743679d17e2ebd2b1372c848b19b62ac86e9490d1c61485f2f90ce708d25f4d7a3bd33c16c6b091da61ca4e5661219fba7a22a171063277e3dccd7a04a"}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@private1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@private}}]}, 0x328}}, 0x0) 17:12:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128\x00'}}}]}, 0x13c}}, 0x0) [ 1585.345818][T18960] loop1: detected capacity change from 0 to 264192 17:12:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x0, "52f21c", 0x5}) 17:12:45 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 1585.421939][T18960] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1585.449102][T18972] netlink: 568 bytes leftover after parsing attributes in process `syz-executor.3'. 17:12:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x60}, 0x0) 17:12:45 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x0, 0x3}, 0x20) [ 1585.468486][T18960] EXT4-fs (loop1): get root inode failed [ 1585.479659][T18960] EXT4-fs (loop1): mount failed 17:12:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019020000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:45 executing program 3: syz_clone(0x109000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:45 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 17:12:45 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d08, &(0x7f00000000c0)) 17:12:45 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x80a41) write$midi(r0, &(0x7f0000000040)="e4", 0xfffffffffffffdef) 17:12:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890b, &(0x7f0000000300)) 17:12:45 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x76}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='a', 0x1}], 0x1}, 0x0) 17:12:45 executing program 4: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 17:12:45 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0x10, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:45 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2000000}, 0x90) [ 1585.664154][T18989] loop1: detected capacity change from 0 to 264192 [ 1585.675730][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:45 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0x3, 0x0, 0x0) [ 1585.710750][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1585.748876][ T6566] loop1: unable to read partition table 17:12:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) [ 1585.782346][T18989] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1585.834132][T19003] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1585.860291][T18989] EXT4-fs (loop1): get root inode failed [ 1585.866087][T18989] EXT4-fs (loop1): mount failed 17:12:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019030000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0x2, 0x0, 0x0) 17:12:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 17:12:46 executing program 3: socket(0x18, 0x0, 0x8) 17:12:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname$netrom(r0, 0x0, &(0x7f00000001c0)) 17:12:46 executing program 4: r0 = socket(0x25, 0x5, 0x0) read$alg(r0, 0x0, 0x0) 17:12:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 17:12:46 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000001880), 0x41) 17:12:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0xf) [ 1586.025795][T19013] loop1: detected capacity change from 0 to 264192 17:12:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 17:12:46 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='a', 0x1}], 0x1}, 0x0) 17:12:46 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0) [ 1586.089368][T19013] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1586.167880][T19013] EXT4-fs (loop1): get root inode failed [ 1586.196696][T19013] EXT4-fs (loop1): mount failed 17:12:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019040000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:46 executing program 0: add_key$user(&(0x7f00000003c0), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="9c", 0x1, 0xfffffffffffffffc) 17:12:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) 17:12:46 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) timerfd_gettime(r0, 0x0) 17:12:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180), 0x4) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 17:12:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="e9ec5b16bcb7c57ffd5b1c11f5184117b5c34ddc5297906e44590ec96ce093e4909ee1d0ce475de6059ca349258e49b1e27391cbc8598fd81fc4dfbe8234380a420cc735c41190c0", 0x48}]) 17:12:46 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x8}, 0x20) 17:12:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) [ 1586.373086][T19040] loop1: detected capacity change from 0 to 264192 17:12:46 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x844, 0x5}) 17:12:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) [ 1586.425284][T19040] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1586.486095][T19040] EXT4-fs (loop1): get root inode failed [ 1586.499454][T19040] EXT4-fs (loop1): mount failed 17:12:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="e9ec5b16bcb7c57ffd5b1c11f5184117b5c34ddc5297906e44590ec96ce093e4909ee1d0ce475de6059ca349258e49b1e27391cbc8598fd81fc4dfbe8234380a420cc735c41190c0", 0x48}]) 17:12:47 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x844, 0x5}) 17:12:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019050000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:47 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) connect$ax25(r0, 0x0, 0x0) 17:12:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@mcast2}}}}, 0xc0}}, 0x0) 17:12:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xfffffffffffffffc, 0x0) 17:12:47 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:12:47 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x142680, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_open_dev$vcsn(0x0, 0x0, 0x0) 17:12:47 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x844, 0x5}) [ 1587.073445][T19058] loop1: detected capacity change from 0 to 264192 17:12:47 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040), 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='a', 0x1}], 0x36, &(0x7f0000000280)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x0) 17:12:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="e9ec5b16bcb7c57ffd5b1c11f5184117b5c34ddc5297906e44590ec96ce093e4909ee1d0ce475de6059ca349258e49b1e27391cbc8598fd81fc4dfbe8234380a420cc735c41190c0", 0x48}]) [ 1587.157603][T19058] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:47 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x844, 0x5}) 17:12:47 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) [ 1587.227744][T19058] EXT4-fs (loop1): get root inode failed [ 1587.233801][T19058] EXT4-fs (loop1): mount failed 17:12:47 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) read$alg(r0, &(0x7f0000000140)=""/3, 0x3) 17:12:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@fat=@discard}]}) 17:12:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019060000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0xb, 0x0, 0x0) 17:12:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="e9ec5b16bcb7c57ffd5b1c11f5184117b5c34ddc5297906e44590ec96ce093e4909ee1d0ce475de6059ca349258e49b1e27391cbc8598fd81fc4dfbe8234380a420cc735c41190c0", 0x48}]) 17:12:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) [ 1587.391114][T19087] FAT-fs (loop3): bogus number of reserved sectors [ 1587.410214][T19090] loop1: detected capacity change from 0 to 264192 [ 1587.419467][T19087] FAT-fs (loop3): Can't find a valid FAT filesystem 17:12:47 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7fff800}, 0x1c) 17:12:47 executing program 2: r0 = socket(0x25, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 17:12:47 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xffffffffffffff30) [ 1587.438674][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1587.464225][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1587.480841][ T6566] loop1: unable to read partition table 17:12:47 executing program 3: syz_open_dev$dri(&(0x7f0000000440), 0x6, 0x0) [ 1587.528991][T19090] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:47 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty}, 0x20) 17:12:47 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x80a41) write$midi(r0, 0x0, 0x0) [ 1587.574491][T19090] EXT4-fs (loop1): get root inode failed [ 1587.582966][T19090] EXT4-fs (loop1): mount failed 17:12:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x17) 17:12:48 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xe000) 17:12:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "a53fa31fbe6fcd19c57a316e49d653346fb74b58182546ae9d39b96203fd151e"}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@loopback, 0x0, 0x32}, @in=@private}}}, 0xf8}}, 0x0) 17:12:48 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x80a41) write$midi(r0, &(0x7f0000000040)="e4", 0x164db1) 17:12:48 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r0, 0x0, 0x0) 17:12:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019070000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:48 executing program 5: syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x40) [ 1588.222230][T19113] loop1: detected capacity change from 0 to 264192 17:12:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "ac4892"}) 17:12:48 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:12:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x0) [ 1588.326237][T19113] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1588.356093][T19113] EXT4-fs (loop1): get root inode failed 17:12:48 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x12d200, 0x0) 17:12:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x80000001) 17:12:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 17:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x68}}, 0x0) [ 1588.372481][T19113] EXT4-fs (loop1): mount failed 17:12:48 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x181a81) write$midi(r0, &(0x7f0000000040)="e4", 0x1) 17:12:48 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmmsg$alg(r0, &(0x7f0000001880)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 17:12:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019090000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:48 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000280)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 17:12:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000120001"], 0xf8}}, 0x0) 17:12:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x2f) 17:12:48 executing program 0: keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f0000000100)=""/23, 0x17, &(0x7f0000000200)={0x0}) [ 1588.558120][T19144] loop1: detected capacity change from 0 to 264192 [ 1588.572548][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 17:12:48 executing program 5: add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000580)="9c", 0x1, 0xfffffffffffffffc) 17:12:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 1588.611876][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1588.627041][T19148] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1588.645342][ T2968] loop1: unable to read partition table 17:12:48 executing program 2: keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f0000000100)=""/23, 0x17, 0x0) 17:12:48 executing program 0: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 17:12:48 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xb, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 1588.686902][T19144] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:48 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0xd6, 0x0) [ 1588.770396][T19144] EXT4-fs (loop1): get root inode failed [ 1588.783094][T19144] EXT4-fs (loop1): mount failed 17:12:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190a0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0xc0586300}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='a', 0x1}], 0x1}, 0x0) 17:12:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 17:12:49 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 17:12:49 executing program 5: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x6) 17:12:49 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x17) 17:12:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="680010"], 0x68}}, 0x0) 17:12:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2, 0x0, 0x32}, @in=@private}, 0x0, 0x300}}, 0xf8}}, 0x0) 17:12:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8918, &(0x7f0000000300)) 17:12:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) 17:12:49 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x1c0000) read$midi(r0, 0x0, 0x0) 17:12:49 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xf, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 1588.980134][T19180] loop1: detected capacity change from 0 to 264192 [ 1588.989094][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1589.010495][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1589.018444][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1589.078587][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1589.102778][ T6566] loop1: unable to read partition table [ 1589.122918][T19180] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1589.152459][T19180] EXT4-fs (loop1): get root inode failed [ 1589.158148][T19180] EXT4-fs (loop1): mount failed 17:12:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190c0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:49 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)='a', 0x1}], 0x1}, 0x0) 17:12:49 executing program 4: syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x127200) 17:12:49 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x1) 17:12:49 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000100), 0xffffffffffffffff, 0x292300) 17:12:49 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1, 0x0, 0x0) 17:12:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000340)) 17:12:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 17:12:49 executing program 0: syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x80a41) 17:12:49 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 17:12:49 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @empty}, 0x1c) 17:12:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000400160001000000000000000000fc010000000000000000000000000000fc0100000000000000000000000000000000000000b400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200"/176], 0xf8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000100)={'vxcan1\x00', @ifru_map={0x2, 0xffff, 0xc, 0x6, 0x5, 0x5}}) accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x0, 'veth0_vlan\x00', {0x8}, 0x7b3}) [ 1589.330676][T19206] loop1: detected capacity change from 0 to 264192 [ 1589.416060][T19206] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1589.449810][T19206] EXT4-fs (loop1): get root inode failed [ 1589.455726][T19206] EXT4-fs (loop1): mount failed 17:12:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190d0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:49 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 17:12:49 executing program 3: socket(0xa, 0x0, 0x1e9) 17:12:49 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) 17:12:49 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 17:12:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x14, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 1589.549876][T30949] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:12:49 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000001680), r0) 17:12:49 executing program 0: syz_clone(0x211eb680, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:49 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x1d) 17:12:49 executing program 4: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/238, 0xee) [ 1589.729048][T19230] loop1: detected capacity change from 0 to 264192 [ 1589.740373][T30949] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:50 executing program 0: socket(0x27df5eebed661e01, 0x0, 0x0) [ 1589.789365][T30949] Buffer I/O error on dev loop1, logical block 0, async page read [ 1589.843724][T30949] loop1: unable to read partition table [ 1589.879998][T19230] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c130000160001000000000000000000fc010000000000000000000000000000fc010000000000000000000000000000fffc00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x135c}}, 0x0) 17:12:50 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 17:12:50 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000400)={0x1a, 0x204, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 17:12:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190f0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:50 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) [ 1589.900241][T19230] EXT4-fs (loop1): get root inode failed [ 1589.915375][T19230] EXT4-fs (loop1): mount failed 17:12:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) 17:12:50 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x84}}], 0x18}, 0x0) 17:12:50 executing program 0: getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) [ 1589.978454][T19248] netlink: 4688 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.052567][T19253] loop1: detected capacity change from 0 to 264192 [ 1590.167757][T19253] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1590.194592][T19253] EXT4-fs (loop1): get root inode failed [ 1590.205492][T19253] EXT4-fs (loop1): mount failed 17:12:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in=@broadcast}, @in, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 17:12:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast1}}, 0x28}}, 0x0) 17:12:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180), 0x20000186) 17:12:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 17:12:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) 17:12:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019100000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:50 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x1) 17:12:50 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0xdb, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) [ 1590.673834][T19270] loop1: detected capacity change from 0 to 264192 17:12:50 executing program 4: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) 17:12:51 executing program 3: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, &(0x7f0000000080)="0c703d7c7ea98a10886886eb59cb4e", 0xf, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="f827517a8285c51232a0c563f932fa4f3e1cd1fa3b30ea2a991bf60adb662aecc316fdf9a6b8d4e8b29aeb5e84f9dde8543ada8b93debf22f7a02f647a7709693e44072c6859de0618b219de146faa8864f240378b7544445faa8814caa8288b15994e5d6ad1d16d367667a2771232861728d914e372ba863bb25d4285b08a7638e32b226a0292faa0db0312395de230e78a89f37adb8ff406ac246514d223db4d6c9a36d02fc39d697936044061b14ead99fc5d46e1501ca062e0ce75107f1af2d3680ddb8ea8ef6b5415aad9aab77d875c20b64037d24821e654cbf47d886e0de6fce8a38136dd315dec43") syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000002c0), 0x2, 0x40) 17:12:51 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0x11, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 17:12:51 executing program 5: add_key$user(&(0x7f00000003c0), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 17:12:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 17:12:51 executing program 4: keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f0000000100)=""/23, 0x17, &(0x7f0000000200)={0x0, &(0x7f0000000180)="e72dc1a0a16523931b4db3d19df2a9915a7bc4da526af49a478b050c7c52fb81e958b9e6b53b0d9bf1d92220170d4592b01ceaa352328b55a216d7f61ace0adb2b", 0x41}) [ 1590.784668][T19270] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1590.818667][T19270] EXT4-fs (loop1): get root inode failed 17:12:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x10d, 0xf, 0x0, 0x0) [ 1590.872098][T19270] EXT4-fs (loop1): mount failed 17:12:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_encap(r0, 0x10e, 0x3, 0x0, 0x0) 17:12:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019110000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:51 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x1c0000) read$midi(r0, &(0x7f00000000c0)=""/183, 0xb7) 17:12:51 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) 17:12:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@private1, @in6=@private1}, {@in6=@mcast2}, @in=@private}}}, 0xf8}, 0x300}, 0x0) 17:12:51 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) 17:12:51 executing program 4: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x181) 17:12:51 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x401) write$UHID_INPUT(r0, 0x0, 0x0) 17:12:51 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@ieee802154, 0x80) 17:12:51 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x64200) 17:12:51 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x810c5701, 0x0) 17:12:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_OIF={0x8}]}, 0x30}}, 0x0) 17:12:51 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) [ 1591.099046][T19309] loop1: detected capacity change from 0 to 264192 [ 1591.162465][T19309] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1591.209872][T19309] EXT4-fs (loop1): get root inode failed [ 1591.228788][T19309] EXT4-fs (loop1): mount failed 17:12:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019260000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:51 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000400)={0x1a, 0x0, 0x2, 0x1, 0x5, 0xf2, @broadcast}, 0x10) 17:12:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) 17:12:51 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8000000000000001}, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 17:12:51 executing program 3: sched_rr_get_interval(0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000200)) 17:12:51 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000051) [ 1591.292264][ T6566] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:12:51 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000280), 0x6) 17:12:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}}}) 17:12:51 executing program 5: syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 17:12:51 executing program 3: syz_clone(0x142680, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 1591.466228][T19333] loop1: detected capacity change from 0 to 264192 17:12:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180), 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 17:12:51 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$alg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0) [ 1591.535005][T19333] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1591.572367][T19333] EXT4-fs (loop1): get root inode failed [ 1591.584195][T19333] EXT4-fs (loop1): mount failed 17:12:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019420000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1591.692740][T19349] loop1: detected capacity change from 0 to 264192 [ 1591.713531][T19349] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1591.735749][T19349] EXT4-fs (loop1): get root inode failed [ 1591.749493][T19349] EXT4-fs (loop1): mount failed 17:12:52 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 17:12:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20400) 17:12:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x300}, 0x0) 17:12:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x17) 17:12:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000340)) 17:12:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019460000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x84, 0x43, 0x0, &(0x7f00000002c0)) 17:12:52 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x402040, 0x0) 17:12:52 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) [ 1592.214286][T19358] loop1: detected capacity change from 0 to 264192 17:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5001"], 0x150}, 0x300}, 0x0) 17:12:52 executing program 0: r0 = socket(0x18, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={0x0}}, 0x0) 17:12:52 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x100200, 0x4) 17:12:52 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[]) [ 1592.335065][T19358] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000002c0)) 17:12:52 executing program 0: r0 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) 17:12:52 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="e1ff"]) 17:12:52 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) [ 1592.439463][T19358] EXT4-fs (loop1): get root inode failed [ 1592.473765][T19358] EXT4-fs (loop1): mount failed 17:12:52 executing program 0: lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2d86, &(0x7f0000000a80)={0x0, 0x0, 0x2}) 17:12:52 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000000, 0x1) write$6lowpan_enable(r0, 0x0, 0x0) 17:12:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) 17:12:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 17:12:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019480000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:52 executing program 5: r0 = syz_io_uring_setup(0x39e7, &(0x7f0000000240), &(0x7f0000400000/0xc00000)=nil, &(0x7f00005d4000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000001c0), 0x3000000}], 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 17:12:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="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", 0x5eb, 0x0, &(0x7f0000001000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 17:12:52 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="9b", 0x1, 0xfffffffffffffff9) 17:12:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000200)=""/217) 17:12:52 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={0x0}) [ 1592.674031][T19396] loop1: detected capacity change from 0 to 264192 17:12:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x33fe0}}, 0x0) 17:12:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x7ffffffff000}}, 0x0) 17:12:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xa5, 0x5}]}) 17:12:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) [ 1592.746074][T19396] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1592.785588][T19396] EXT4-fs (loop1): get root inode failed [ 1592.808546][T19396] EXT4-fs (loop1): mount failed 17:12:53 executing program 0: r0 = syz_io_uring_setup(0xecd, &(0x7f00000002c0)={0x0, 0x8292}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000400)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 17:12:53 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020660b, 0x0) 17:12:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000194a0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1592.882294][ T27] audit: type=1326 audit(1656177173.084:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19414 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f129ca89109 code=0x0 17:12:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 17:12:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x1000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 17:12:53 executing program 2: r0 = socket(0x18, 0x0, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={0x0}}, 0x0) 17:12:53 executing program 3: capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 17:12:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 1592.985359][T19421] loop1: detected capacity change from 0 to 264192 [ 1593.017481][T19421] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6ed", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 1593.108388][T19421] EXT4-fs (loop1): get root inode failed [ 1593.115976][T19421] EXT4-fs (loop1): mount failed 17:12:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27d68ecbc0e94720e3", 0x16, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 17:12:53 executing program 3: getresgid(&(0x7f0000000000), 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 17:12:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6ed", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x8864, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 17:12:53 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 17:12:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000194c0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:53 executing program 2: r0 = io_uring_setup(0x2d86, &(0x7f0000000a80)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:53 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 17:12:53 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) read$sequencer(r0, &(0x7f00000001c0)=""/219, 0xdb) 17:12:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 17:12:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000700)={&(0x7f0000000640), 0xc, 0x0}, 0x0) [ 1593.300725][T19444] loop1: detected capacity change from 0 to 264192 17:12:53 executing program 2: bpf$OBJ_PIN_MAP(0x19, 0x0, 0x0) 17:12:53 executing program 0: syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) [ 1593.398916][T19444] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1593.435975][T19444] EXT4-fs (loop1): get root inode failed 17:12:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @dev}, 0x10) 17:12:53 executing program 5: r0 = io_uring_setup(0x5208, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0), 0x1) [ 1593.493766][T19444] EXT4-fs (loop1): mount failed 17:12:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000040)="04", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) 17:12:53 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0xd2}, 0x0) [ 1593.635541][T19463] device team0 entered promiscuous mode [ 1593.663089][T19463] device team_slave_0 entered promiscuous mode 17:12:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:12:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/247, &(0x7f0000000100)=0xf7) 17:12:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 17:12:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019600000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:53 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) [ 1593.681013][T19463] device team_slave_1 entered promiscuous mode 17:12:53 executing program 4: r0 = io_uring_setup(0x2d86, &(0x7f0000000a80)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4b79, 0x0, 0x3, 0x0, 0x0) [ 1593.734068][T19462] device team0 left promiscuous mode 17:12:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P'], 0xec1}}, 0x0) 17:12:54 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) bind$packet(r0, 0x0, 0x0) [ 1593.772109][T19477] loop1: detected capacity change from 0 to 264192 [ 1593.783775][T19462] device team_slave_0 left promiscuous mode [ 1593.792264][T19462] device team_slave_1 left promiscuous mode 17:12:54 executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xecd, &(0x7f00000002c0)={0x0, 0x8292, 0x9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 17:12:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x0, @loopback, 0x0, 0x0, 'fo\x00'}, 0x2c) 17:12:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) [ 1593.821910][T19477] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:54 executing program 0: lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) io_uring_setup(0x2d86, &(0x7f0000000a80)={0x0, 0xd35a, 0x2}) 17:12:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x3}]}) 17:12:54 executing program 4: lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 17:12:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) [ 1593.946057][T19493] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 1593.951437][T19477] EXT4-fs (loop1): get root inode failed [ 1593.958632][T19477] EXT4-fs (loop1): mount failed 17:12:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019680000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)='5', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 17:12:54 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000280)) 17:12:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 17:12:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)) 17:12:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 17:12:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6ed", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x8906, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 17:12:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x2, 0x0, 0x10) 17:12:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00'}) 17:12:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:12:54 executing program 4: open_tree(0xffffffffffffffff, 0x0, 0x2) 17:12:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) [ 1594.213394][T19517] loop1: detected capacity change from 0 to 264192 [ 1594.239044][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1594.273475][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1594.316373][ T2968] loop1: unable to read partition table [ 1594.341719][T19517] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1594.389924][T19517] EXT4-fs (loop1): get root inode failed [ 1594.395622][T19517] EXT4-fs (loop1): mount failed 17:12:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000196c0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x21, 0x0, &(0x7f00000002c0)) 17:12:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 17:12:54 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='statm\x00') epoll_create(0x0) 17:12:54 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 17:12:54 executing program 2: lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={0x0, 0x1}, 0x10) execve(&(0x7f0000000400)='./file1\x00', &(0x7f0000000680)=[&(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='\x00', 0x0, 0x0], &(0x7f00000008c0)=[&(0x7f0000000700)='\x00', 0x0]) 17:12:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x42, 0x0, &(0x7f00000002c0)) 17:12:54 executing program 2: socket$inet(0x2, 0x3, 0x7) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xecd, &(0x7f00000002c0)={0x0, 0x8292, 0x9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 17:12:54 executing program 4: sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x1c, 0x0, 0x10, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) 17:12:54 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x0) 17:12:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)) 17:12:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x41, 0x0, &(0x7f00000002c0)) [ 1594.642742][T19539] loop1: detected capacity change from 0 to 264192 [ 1594.762262][T19539] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1594.803115][T19539] EXT4-fs (loop1): get root inode failed [ 1594.816887][T19539] EXT4-fs (loop1): mount failed 17:12:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019740000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lc\x00'}, 0x2c) 17:12:55 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x15, 0x0, &(0x7f00000002c0)) 17:12:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 17:12:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000280), 0x0) 17:12:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x17, 0x0, &(0x7f00000002c0)) 17:12:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xd, 0x0, &(0x7f00000002c0)) [ 1594.900474][T19558] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:0 17:12:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x1e, 0x43, 0x0, 0x0) 17:12:55 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$dri(0x0, 0x0, 0x181001) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) 17:12:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000180)) [ 1594.965191][T19563] loop1: detected capacity change from 0 to 264192 [ 1594.977989][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:55 executing program 0: setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) [ 1595.022815][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1595.055193][ T6566] loop1: unable to read partition table [ 1595.104062][T19563] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1595.173210][T19563] EXT4-fs (loop1): get root inode failed [ 1595.178979][T19563] EXT4-fs (loop1): mount failed 17:12:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000197a0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:55 executing program 3: capset(&(0x7f00000024c0), 0x0) 17:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xec1}}, 0x0) 17:12:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@local, @loopback, @private0, 0x0, 0x0, 0x101}) 17:12:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) 17:12:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) 17:12:55 executing program 5: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 17:12:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6ed", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x892f, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 17:12:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x401}]}) 17:12:55 executing program 3: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x180000c, 0xffffffffffffffff) 17:12:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "dc98b2b2"}, &(0x7f0000001440)=0x28) [ 1595.319359][T19588] loop1: detected capacity change from 0 to 264192 17:12:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='statm\x00') ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, 0x0) [ 1595.432505][T19588] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1595.496277][T19588] EXT4-fs (loop1): get root inode failed [ 1595.502769][T19588] EXT4-fs (loop1): mount failed 17:12:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019aa0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:55 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, 0x0) 17:12:55 executing program 5: r0 = syz_io_uring_setup(0xecd, &(0x7f00000002c0)={0x0, 0x8292}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000400), 0x0) 17:12:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x14, 0x0, 0x0) 17:12:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), 0xffffffffffffffff) 17:12:55 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 17:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0xec1}}, 0x0) 17:12:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x19, 0x0, &(0x7f00000002c0)) 17:12:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x1a, 0x0, &(0x7f00000002c0)) 17:12:55 executing program 2: syz_io_uring_setup(0xecd, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 17:12:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xf, 0x0, &(0x7f00000002c0)) [ 1595.664319][T19613] loop1: detected capacity change from 0 to 264192 [ 1595.689044][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 17:12:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 1595.734572][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1595.798649][ T6566] loop1: unable to read partition table [ 1595.828022][T19613] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1595.861715][T19613] EXT4-fs (loop1): get root inode failed [ 1595.867567][T19613] EXT4-fs (loop1): mount failed 17:12:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080), 0x4) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 17:12:56 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x4300, 0x0) 17:12:56 executing program 4: socket$inet(0x2, 0x3, 0x7) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xecd, &(0x7f00000002c0)={0x0, 0x8292, 0x9, 0x0, 0xcf}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 17:12:56 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)) capset(&(0x7f0000000100)={0x20080522, r0}, &(0x7f0000000140)={0x5, 0x572, 0xfff}) capset(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:12:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019ca0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:56 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x30, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}}, [@tclass_kind_options=@c_netem={0xa}]}, 0x30}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40884) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), 0xffffffffffffffff) 17:12:56 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x80}) 17:12:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x7, 0x0, &(0x7f00000002c0)) 17:12:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x4, 0x0, &(0x7f00000002c0)) 17:12:56 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) 17:12:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 17:12:56 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) [ 1596.065581][T19639] loop1: detected capacity change from 0 to 264192 [ 1596.097667][T19643] device team0 entered promiscuous mode 17:12:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x8035, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 17:12:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000002c0)=0x84000000) 17:12:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'pim6reg\x00'}) 17:12:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) [ 1596.134967][T19639] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1596.159469][T19643] device team_slave_0 entered promiscuous mode [ 1596.166962][T19643] device team_slave_1 entered promiscuous mode [ 1596.177705][T19640] device team0 left promiscuous mode [ 1596.219551][T19640] device team_slave_0 left promiscuous mode [ 1596.249339][T19639] EXT4-fs (loop1): get root inode failed [ 1596.252456][T19640] device team_slave_1 left promiscuous mode [ 1596.255356][T19639] EXT4-fs (loop1): mount failed 17:12:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019d30000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) 17:12:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') write$FUSE_GETXATTR(r0, 0x0, 0x0) 17:12:56 executing program 0: socketpair(0x3, 0x0, 0x8000, &(0x7f00000000c0)) 17:12:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 17:12:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27d68ecbc0e94720e3", 0x16, 0x0, &(0x7f00000000c0)={0x11, 0x8864, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 17:12:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27d68ecbc0e94720e32486adda936d6ae6901c73d85a9defd80a99bcfcf623614101132ff6d9adbbf8", 0x36, 0x40040, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x7ffffffff000) [ 1596.413791][T19668] loop1: detected capacity change from 0 to 264192 [ 1596.437700][ T6566] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1596.469300][ T6566] Buffer I/O error on dev loop1, logical block 0, async page read [ 1596.500237][ T6566] loop1: unable to read partition table [ 1596.527688][T19668] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1596.552607][T19668] EXT4-fs (loop1): get root inode failed [ 1596.558622][T19668] EXT4-fs (loop1): mount failed 17:12:57 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) getsockname$inet(r0, 0x0, &(0x7f0000000080)) 17:12:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="6b4cd7ddc4c6a74ddd46b855e261a88f5f9b2c45fc3eee31f9886c1ae4fa65f1ccf2a5f34cea6a526ed46bdedc4f4b5fcc463d4f7343fb7249a510801b08351cb6ff7a600055617bb0de909c01b5c0adaace10fadce742517987d8e5f51470bd8ed58bad19051441a005dbf043dd0dc135b26eeed45a44408b5c95fe4a0057565786f33e7565386ed96d36856540c5f0ef05a2c1090604a3cad581385c40d414d3fc1b6d24b9d1cabaf722ba8f46f47ab6c7b0db7a082fd49362558e588926b396e976902279a93859fdf052e7c6b328915826b9abe9a3a9fb82ca0449d2876ccff673f0a7d60db2e7dbdcab6d7a47aba5fd211dde76e8d8f8ddd8f6e08643a002f514dfa7f72e5d17433d848f250299c08a12616daef699044d9ac8daeeb2f46c440a1ce2a17c06f180bbdb36fc859bd7b5fda6b80c0d14df1b82b21574c3f876b87fb80237cd8b43a0920c4e4197a05b588c824c2636271656c7232fbb05fb7fc9800c659779d04894425c3a7b03ce665eb106415bede6ab491f43bb6f4be2d42bc9a3f70d2cd7b895067c0544d2749b588e35cd4e116d5c9eb14ee5b5e5230695fda011fd5e1b98e4e151f8d315e58c692144758535f6ccf85c92f28477b702388d2e0814989c77c0c508c31fdd5e0357c9cba513e095f1b787efae132020818779c5d9ae8210536d2a493f9cfa6270670c9d8f1052901d4d0ee781070bd4e2d54d1e420d77f37eda92b54a345a060e2d02e51c082bb0da9c05b4e30cdf626381d4795cbafa032a401cc5d13f7d6609662a06174c69fb123904d397657e7f49c8d38b1073be5b0189d092fbedd2c30d16d6674f88a4b88b628ad46073e703ec32365148f373136dcfaba985d74a6497ac0e7d4a53c97359b4af27569f6ccfc10b52fef1acad5cba1728fc9206cf1828117a3ce7f380767dc91621853b60897315b88f8a2fc9c24bec3ab303a6628ff21790da87534fd7a370cad7666890a4ba17173a498ac7d6fca7e89f6fff46ad6a712762884d5524f80dbf10091a7634e5f7963f30dd81ba03273ced2f73030f26234883cbde524ce5d4a5878914b0ce5e8bd5305761db0c883f079e2e7581c19b92b1c72671e10b56d468eb3f71e7f1f085be255fc64084adcbeeed7b963470ba8a3b8062ff63f585f444669859ac4c5c7d56d2dc24fe51d6eee4714ddf11247c6ae6b201f84bb638da7fb1183e8dd5b822f57e5e7de5bbfcc8e719f9620ca78eff94a3ff3f8d78610897859837cbb6a9a2c9f11ec759bbf31490e523dc3b4484beb20b0afec08d773cca3e7055ff45d0a7ca7d73b47fc3160fd565631ddbbbe1009705b5c156e0181310696e08a2e2597323f5710124976ce5cc04526936f7026c1e5996377073201ceaa30fbbe21ad933151f70b5240dbaff8ac454db8f118d732c638e414bde58b47522a315970aa524c35a8129faea31c7269d5a9efa3c377fcf4ab68d58a704e4d2fa23a62d84fa29c1b9dcbf0d58cc1cdd2c0b1cd0eb48b9506338405b313c35ba9c009bb7b6f8344f152fe50fb762b03d840292bc1cb4691ae6e22eb51c9ee5d6657959b3f4f9ca8828bf79ecca90cb8fcae573459c03bb081286892ebf58027dca25d8c46f296379f05efa42b7b87dce69c5169ed51cd4a8e03e88c26cf4f7e7274ba25b840d5849c27ec85ac21647cfc52b43180c5ba70e1905186d0a26a0e335d84a20c8ee1751e0f929d5c4afc3bd9541b96d398f68f06e493b747d4b1b0c23a4be38f803556a0f0544932a8a49187daaded40a2c5470fc12f12ba1d6d0201000b56403264602b792580396cb936778c906a58a2235fe4baed0019d5bfb9e8c06eb42b4544fba19d47e63554eec8441f9695497f5218c4a0631e306658b2de6468151b5e2def98041bafa5e597822e91004abdeda41b81af48132f58c0837c699b3601aa8899a7147bd3b3d5ca68305dbfa1b4f87aa91af99a085429ff9b7ce3bcc643521c1e068d8c70edc8a47eff9615a497ffa65e3dbf0c2efc8acfce366c37163fb5273a684053dd9995bd86935075dc6d8eef30a4bbbca7e939c96f9e804b919d12f51256c97ead469d30dbadc97e5f2aec882bb512087a136cc474955cd0d7016db595a0f36a3f66891db0130ffdf02", 0x5ef, 0x0, &(0x7f0000001000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 17:12:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27d68ecbc0e94720e32486adda936d6ae6901c73d85a9defd80a99bcfcf623614101132ff6d9adbbf8", 0x36, 0x40040, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x12) 17:12:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) 17:12:57 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 17:12:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019fe0000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 17:12:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) 17:12:57 executing program 0: bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)={0x0}, 0x10) [ 1597.050640][T19683] loop1: detected capacity change from 0 to 264192 17:12:57 executing program 3: io_uring_setup(0x0, &(0x7f0000000a80)) 17:12:57 executing program 5: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) 17:12:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) [ 1597.102941][T19683] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1597.119961][T19683] EXT4-fs (loop1): get root inode failed [ 1597.133998][T19683] EXT4-fs (loop1): mount failed 17:12:57 executing program 4: execve(&(0x7f0000000400)='./file1\x00', &(0x7f0000000680), 0x0) 17:12:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:12:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019250100600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local}, 0x8) [ 1597.237324][T19701] loop1: detected capacity change from 0 to 264192 [ 1597.270037][ T2968] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1597.300095][ T2968] Buffer I/O error on dev loop1, logical block 0, async page read [ 1597.320115][ T2968] loop1: unable to read partition table [ 1597.345430][T19701] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1597.364561][T19701] EXT4-fs (loop1): get root inode failed [ 1597.370836][T19701] EXT4-fs (loop1): mount failed 17:12:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1a, 0x0, &(0x7f0000000180)) 17:12:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 17:12:58 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)) 17:12:58 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 17:12:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 17:12:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019650100600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:58 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x408c04, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) execve(0x0, &(0x7f00000009c0)=[0x0], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 17:12:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) 17:12:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) [ 1597.874435][T19713] x_tables: duplicate underflow at hook 1 [ 1597.886940][T19718] loop1: detected capacity change from 0 to 264192 17:12:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "d0d3460cded6be9a", "6ab4d006e049f350e15af6a1d67de9abee99cb4379905a879218f9a68ed945ff", "b3d6ebd8", "be3a3dafeceb6199"}, 0x38) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private}}}], 0x20}, 0x0) [ 1597.928865][ T27] audit: type=1326 audit(1656177178.124:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19719 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f129ca89109 code=0x0 17:12:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6ed", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 17:12:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6ed", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 17:12:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6ed", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) [ 1598.003989][T19718] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1598.034468][T19718] EXT4-fs (loop1): get root inode failed [ 1598.046323][T19718] EXT4-fs (loop1): mount failed 17:12:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x9, 0x0, &(0x7f00000002c0)) 17:12:58 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), 0xffffffffffffffff) 17:12:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019fa0100600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) [ 1598.214049][T19741] loop1: detected capacity change from 0 to 264192 [ 1598.227547][T19741] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1598.244701][T19741] EXT4-fs (loop1): get root inode failed [ 1598.250537][T19741] EXT4-fs (loop1): mount failed [ 1598.312792][ T6566] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 17:12:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) 17:12:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@arp={@local, @private=0xa010100, 0xffffff00, 0xffffff00, 0xe, 0x1, {}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x7f, 0x8, 0x0, 0x8, 0x800, 'team_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x0, 0x320}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3f}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 17:12:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="bb", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 17:12:58 executing program 3: r0 = io_uring_setup(0x2d86, &(0x7f0000000a80)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x3, &(0x7f0000000b00), 0x8) 17:12:58 executing program 4: listxattr(&(0x7f0000000980)='./file1\x00', 0x0, 0x0) 17:12:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019330200600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:58 executing program 5: syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) [ 1598.731601][T19748] loop1: detected capacity change from 0 to 264192 17:12:59 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) io_uring_setup(0x2567, &(0x7f0000000cc0)={0x0, 0x0, 0x4}) 17:12:59 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x24c2) 17:12:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1598.783735][T19755] x_tables: duplicate underflow at hook 1 17:12:59 executing program 5: getresgid(&(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000140)) [ 1598.830894][T19748] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 17:12:59 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 17:12:59 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) capset(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, 0x0) capset(&(0x7f00000024c0)={0x20080522}, 0x0) [ 1598.874774][T19748] EXT4-fs (loop1): get root inode failed [ 1598.881204][T19748] EXT4-fs (loop1): mount failed [ 1598.884562][T19762] device team0 entered promiscuous mode 17:12:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xa2}]}) [ 1598.925983][T19762] device team_slave_0 entered promiscuous mode [ 1598.940033][T19762] device team_slave_1 entered promiscuous mode [ 1598.980862][T19760] device team0 left promiscuous mode [ 1599.007171][T19760] device team_slave_0 left promiscuous mode [ 1599.026407][T19760] device team_slave_1 left promiscuous mode 17:12:59 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 17:12:59 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x0, 0x0) 17:12:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019350200600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:12:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='statm\x00') sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:59 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000740)={0x5}) 17:12:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) 17:12:59 executing program 3: open_tree(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x101) [ 1599.602831][T19779] loop1: detected capacity change from 0 to 264192 [ 1599.604137][T19780] device team0 entered promiscuous mode 17:12:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x20000000, 0x3}, 0x10) 17:12:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x29, 0x0, &(0x7f00000002c0)) [ 1599.646409][T19779] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1599.669519][T19780] device team_slave_0 entered promiscuous mode [ 1599.684912][T19779] EXT4-fs (loop1): get root inode failed [ 1599.691695][T19780] device team_slave_1 entered promiscuous mode 17:12:59 executing program 4: setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0xffffffffffffffac) [ 1599.717515][T19779] EXT4-fs (loop1): mount failed 17:12:59 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x28003, 0x0) 17:12:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 1599.791063][T19778] device team0 left promiscuous mode [ 1599.815796][T19778] device team_slave_0 left promiscuous mode 17:13:00 executing program 4: syz_clone(0x4a42000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:13:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x8, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 1599.836304][T19778] device team_slave_1 left promiscuous mode 17:13:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019690200600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:13:00 executing program 3: memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2\x17.:u\x810.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x88\xfd\xd7\xb0\x94\x82t\x96\r2x\xc5\x9b\x8c\x9dr\a\x051\xff\x9ci\x88\xae\xee\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xef[x\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\'\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000094e000/0x4000)=nil, 0x4000, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0xdc00, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1004000, 0x0, 0x10}]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000093b000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\x00') 17:13:00 executing program 5: syz_io_uring_setup(0x6ea4, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:13:00 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr\x00') 17:13:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000001440)) 17:13:00 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x202, 0x0) 17:13:00 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) [ 1599.973588][T19808] loop1: detected capacity change from 0 to 264192 [ 1599.987128][T19806] page:ffffea0000458000 refcount:2 mapcount:1 mapping:ffff888145c197f0 index:0x0 pfn:0x11600 17:13:00 executing program 0: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1600.048014][T19808] EXT4-fs error (device loop1): __ext4_fill_super:5235: inode #2: comm syz-executor.1: iget: bad i_size value: -2656599746893839360 [ 1600.094780][T19806] head:ffffea0000458000 order:9 compound_mapcount:1 compound_pincount:0 [ 1600.103556][T19806] aops:hugetlbfs_aops ino:2be78 dentry name:"anon_hugepage" [ 1600.115670][T19806] flags: 0xfff0000001000d(locked|uptodate|dirty|head|node=0|zone=1|lastcpupid=0x7ff) [ 1600.125814][T19808] EXT4-fs (loop1): get root inode failed [ 1600.130030][T19806] raw: 00fff0000001000d ffffffff90f8e998 ffffffff90f8e998 ffff888145c197f0 17:13:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 17:13:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="cd9aa06e4abb948c9aa97316f6edea3223638fa394edf242560d537bff52df5888d47d33c5de7983f812492184d4bf5d6e0a037f88c1", 0x36, 0x0, &(0x7f0000000140)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @dev}, 0x14) [ 1600.140306][T19806] raw: 0000000000000000 0000000000000002 00000002ffffffff 0000000000000000 [ 1600.149592][T19806] page dumped because: VM_BUG_ON_FOLIO(!folio_test_swapbacked(folio) && (folio_test_private(folio) == !folio_get_private(folio))) [ 1600.163908][T19806] page_owner tracks the page as allocated [ 1600.164183][T19808] EXT4-fs (loop1): mount failed [ 1600.169822][T19806] page last allocated via order 9, migratetype Movable, gfp_mask 0x346cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 13226977537, free_ts 0 [ 1600.169866][T19806] get_page_from_freelist+0x1f18/0x3a40 [ 1600.169898][T19806] __alloc_pages+0x1c7/0x510 [ 1600.169926][T19806] alloc_fresh_huge_page+0x49a/0x700 [ 1600.176841][T19819] device team0 entered promiscuous mode [ 1600.196909][T19806] alloc_pool_huge_page+0xf8/0x1d0 [ 1600.237744][T19806] set_max_huge_pages+0x550/0x1280 17:13:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="9b28a66d66445222f08505d0cf27d68ecbc0e94720e32486adda936d6ae6901c73d85a9defd80a99bcfcf623614101132ff6d9adbbf8", 0x36, 0x40040, &(0x7f00000000c0)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 1600.243375][T19806] hugetlb_sysctl_handler_common+0x264/0x330 [ 1600.253375][T19819] device team_slave_0 entered promiscuous mode [ 1600.274055][T19806] proc_sys_call_handler+0x4a1/0x6e0 [ 1600.289560][T19819] device team_slave_1 entered promiscuous mode [ 1600.297038][T19806] __kernel_write+0x465/0x9e0 17:13:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019e10200600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000000180)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020000000b3fea39fa533b1d1f28b249b8e5100000800050000000af301000400000000000000000000000100000010e99ea67c2c98cf91b511ee2fd528b74f0cdc1c7141dd71250d1159fe12297a3fc49bdc21db", 0x70, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000840)) 17:13:00 executing program 5: io_uring_setup(0x2d86, &(0x7f0000000a80)={0x0, 0x0, 0x2}) [ 1600.318277][T19806] kernel_write+0xe2/0x540 [ 1600.331017][T19806] process_sysctl_arg+0x22f/0x470 [ 1600.349906][T19806] parse_args+0x46e/0x8b0 [ 1600.352151][T19818] device team0 left promiscuous mode [ 1600.364989][T19806] do_sysctl_args+0xc3/0x130 [ 1600.382740][T19806] kernel_init+0x6f/0x1d0 [ 1600.388272][T19827] loop1: detected capacity change from 0 to 264192 [ 1600.402345][T19806] ret_from_fork+0x1f/0x30 [ 1600.415353][T19818] device team_slave_0 left promiscuous mode [ 1600.422549][T19818] device team_slave_1 left promiscuous mode [ 1600.423241][T19806] page_owner free stack trace missing [ 1600.436868][T19806] ------------[ cut here ]------------