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", 0x1000, 0x40}, {&(0x7f0000001180)="aec136ae2dc59807e77537ea18bcc388e24f6dd6a12c5c48d725030435f3cf02c95515853730e2f9df5c474bd7bdf560feece711e7dbd108d2b1807ac5e87cd6ab6747d386af5a9d48d9f2a52142ddecf66abfc45e38ddcd5dc618e8fe9a352fe1093ef82c02afa2ad3184de19f6b4c8d3084565addc3d0d0bb130abe11eb828f139e898824f9454fb129b7535496f2947bbe289eea99de1584e75e228505236e0ddf5979c7c", 0xa6, 0x8}], 0x180018, &(0x7f0000001240)=ANY=[@ANYBLOB='}ode=adaptive,lazytime,rootcontextUsystem_u,\x00']) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x301800, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept4$alg(r1, 0x0, 0x0, 0x800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000001280), 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60005865100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00'], 0x60}}, 0x0) 16:52:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 16:52:36 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb503, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000068100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 16:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 16:52:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000006c100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 774.790272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.799533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 774.887355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.911566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 16:52:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 16:52:37 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb603, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000070100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000074100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 775.649091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 775.671475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000007a100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x21fed68d307984b9, 0x103) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x40) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_open_dev$mouse(&(0x7f0000000100), 0x30096774, 0x2) 16:52:37 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb703, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000081100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x800000000000000}, 0x0) 16:52:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:38 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb803, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x800, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) preadv(r1, &(0x7f0000001800)=[{&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/109, 0x6d}, {&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001400)=""/26, 0x1a}, {&(0x7f00000001c0)=""/128, 0x80}], 0x8, 0x81, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000000) dup3(r3, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001540)={'ip6gre0\x00', &(0x7f00000014c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x2, 0x3, 0x2c, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7800, 0x4ba}}) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) mmap(&(0x7f0000564000/0x1000)=nil, 0x1000, 0x800000, 0x40010, 0xffffffffffffffff, 0x4db80000) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'ip6_vti0\x00', r5, 0x29, 0x80, 0x5, 0x4, 0x4, @private1, @remote, 0x8, 0x40, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f00000016c0)={'sit0\x00', &(0x7f0000001640)={'syztnl0\x00', r7, 0x4, 0x6, 0x3, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8, 0x1, 0x7, 0x6da}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000086100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 776.542825] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 776.557100] audit: type=1800 audit(1625849558.449:2851): pid=22831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15441 res=0 [ 776.558038] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 16:52:38 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb903, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 776.686096] audit: type=1800 audit(1625849558.569:2852): pid=22831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15441 res=0 16:52:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) write(r0, &(0x7f0000000080)="06609995087b6cb1e1339ac4be373944023ffe1b385d7ae0d40dff1a503f3649decf3fcb55198768baf6715466a912de568434", 0x33) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '{:\x00'}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600001a8100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 776.753505] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 776.775092] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x2000000000000000}, 0x0) 16:52:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600003b6100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x400, 0x7f) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:41 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xba03, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600001b8100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x4800000000000000}, 0x0) 16:52:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4040, 0x28) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000200)) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000001c0)={0x7, 0x0, 0x53}) getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nf_conntrack', 0x22000, 0x1) recvmsg$can_raw(r3, &(0x7f0000001700)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/9, 0x9}, {&(0x7f0000001600)=""/114, 0x72}], 0x6}, 0x100) 16:52:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000fe1100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x4c00000000000000}, 0x0) [ 780.988557] Bluetooth: hci2: command 0x0406 tx timeout 16:52:44 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbb03, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000f0100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x4f0e000000000000}, 0x0) 16:52:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000200)={0x80000000}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000000) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r6, &(0x7f0000000240)="f4a6729792c1cb5f1ab3f472854935e07b6f5c248732174902840f677cf87354a5e4aedaf10848e51bd2d79035800964be7bd61a14bf7351737a452d13da40ceb150dbfb00d32f170676eb20366d3412280621b9c76ed3b22a7a514515e9f65638023ebce06f4cd4947e3f4dcc75e94beb3798c515effdf6b007d8922f3e4c4ad8ae7d94931a19170dde31fc92c5dfeab04bb82d1b8639e06b6c471d99a8db636270caab8deae5faac95cb", 0xab) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000000008072ee8bb50004dbc3bfb2ff93c44b3faf37049f0009000000"], 0x1c}}, 0x2000c001) 16:52:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600003f0100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 782.637677] nla_parse: 4 callbacks suppressed [ 782.637687] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c653020287d2b232720ffff20ffff0a7c35efe211b1da1b1305b5e81f83bbc3d452f6164bc162d00f570eecdcad79cf8c1fda79865d3aa7d4cc81cbc3da809fbc293afbaa009f1c5b2fecc225f03f3583c558690aa91b75aebe9b45df18712709d63cfcfbe50529f824c57631e62f02f9eb4642566a26e88fac1a15576c0ba94ff61e9bf1fe5102f465b7c04f6c19aef53c1a4b59ca9eabd268d0b0f7eabaff85bc18bc41e3557d01d8b27486a4f1d6d462cfa365023fec0a3557f7ea82efbb876fb18e7e75772a33a397cb1a4571a0ffeca3b410a6db74ea68367711fd794e22f9cc29adbc64ecd8ba6bc30ec8a0"], 0xf6) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x20010, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:44 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbc03, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 782.685703] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 16:52:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600003f1100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0xd2ce}, 0x1c) 16:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x6800000000000000}, 0x0) [ 782.866026] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 782.887281] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600003f4100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 783.045100] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 783.054271] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:47 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbd03, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600002f6100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 16:52:47 executing program 2: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x1) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = openat$incfs(r1, &(0x7f00000000c0)='.log\x00', 0x200801, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x0, 0x2e, 0x3d, &(0x7f0000000100)="5d6e1444e78a395fa0bde9858c14b0d3dd4f8a3b85f8bf1fe29a1fbc2b86806a0bdd0f4372cc47217992001d1e69", &(0x7f0000000180)=""/61, 0xffff, 0x0, 0x1000, 0x15, &(0x7f00000001c0)="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", &(0x7f00000011c0)="6468e9311c0db316bb51f35c8125adbcf3568c6268", 0x1, 0x401}, 0x48) 16:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000fffe100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x7400000000000000}, 0x0) [ 785.694444] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:47 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbe03, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 785.742608] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x141402, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000000) perf_event_open(&(0x7f00000000c0)={0xc7384b86c4203d9, 0x80, 0x1f, 0x0, 0x7, 0x4, 0x0, 0x5, 0x800, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x48716, 0x8, 0x5, 0x3, 0xf170, 0x8, 0x401, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r4, 0x3) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x7a00000000000000}, 0x0) [ 785.987236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 785.996284] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) preadv(0xffffffffffffffff, &(0x7f0000003d40)=[{&(0x7f0000003b80)=""/20, 0x14}, {&(0x7f0000003bc0)=""/66, 0x42}, {&(0x7f0000003c40)=""/20, 0x14}, {&(0x7f0000003c80)=""/143, 0x8f}], 0x4, 0x9, 0x0) syz_mount_image$ocfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3, 0x5, &(0x7f0000001380)=[{&(0x7f0000000180)="7060f336f7bcb75bf58d0984a1e4ecfe383b376b43ba7700a079904080eae9406ff29d2a9e9ffcf26c708c241876c85a4703aae33c75c8", 0x37, 0x3}, {&(0x7f00000001c0)="17b77a0ff69f7d8ca75cc55cb48da2fe5ba0034cbbed1b27b33011740e18c9b26d79a4deabf3aaac4897d9621d032f38c9cfcb0e66f863353b7c0cf0729afc75d26ce35e5e3518250ff69b69f9fdce9ae843caba30df0abe4822028c3ca0ca18efe38459a2139dacf1d059d34f75e2271cc8f6c1f94a8675fc6448098ebd6ec0ff", 0x81, 0x5}, {&(0x7f0000000280)="2c52e5dd43daa801a9406122dbebb98a0b92314bba1e4598a3ee64ecf8af732da780fe696fde0ce194a88aeebcf544f7ba55c298eb0f2affba2c6f4033fdb7820c8481d739a406eaec88218920f7d29b4f032474fb5a34283d66f20cc0eec16a11a01c00c8c9dd07cf6ea13aca7b91", 0x6f, 0xf6}, {&(0x7f0000000300)="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", 0x1000, 0xa3}, {&(0x7f0000001300)="8b3cd4654563866bf4b9d8e9b15c38ab1891c70469cfc6e1c0966aba29ef2fabf893b538d36728bec9d56b5c4a31ac53b82cdda1f6f36db33a3c3739b4f201a596ed6a0270c24a3f681f91df9efb9c22a7fa239937c3be3e009d0b492c5bec279c8e6a3d67672f14e094b51d53253e7c0ae63093b8", 0x75, 0xaa5}], 0x10, &(0x7f0000001400)={[{'[('}]}) r2 = syz_mount_image$hfs(&(0x7f0000002600), &(0x7f0000003880)='./file0\x00', 0xff, 0x3, &(0x7f00000039c0)=[{&(0x7f00000038c0)="46dc1b3d72f5fae1ef83b653a1681ee0058bfcafb8e8ffa94a3dd065a15464d4f6a62d0550980dbd9d8dada6b714f5430a144553fb2fdfa071bb4b0d829a0f4e455dfb629ad5979177cf73d7614f", 0x4e, 0xfffffffffffffffe}, {&(0x7f0000003940)="41765b5de05223c1a58f3b357f5470ab62b949e81a57cc38bbc07144b3a5ea4894263e5addb37e34916419", 0x2b, 0x5}, {&(0x7f0000003980)="3a51c72c822e0208555d8ba30f0697889fa5e7839956438e27bcb7e8", 0x1c, 0x7}], 0xa0013, &(0x7f0000003a40)={[{@creator={'creator', 0x3d, "97a492cf"}}, {@part={'part', 0x3d, 0x8000}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@type={'type', 0x3d, "dde68fd8"}}, {@gid={'gid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, 0xee00}}], [{@dont_measure}]}) statx(r2, &(0x7f0000001440)='./file0\x00', 0x800, 0x200, &(0x7f0000001480)) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000003b40)={0x0, 0x0, &(0x7f00006eb000/0x4000)=nil}) syz_mount_image$msdos(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x200, 0x5, &(0x7f00000037c0)=[{&(0x7f0000001600)="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", 0x1000, 0x9}, {&(0x7f0000002600), 0x0, 0x1}, {&(0x7f0000002640)="61a8424b7c5fa8505ed5d222699e5109cbb27e825935aea7e7e0d7f9ccabd28db71df936337a5eb026167632d5e9ed3102e52db757423be85be9a71858e1784fe8fe7d24b7f4de9f0e36c85b51cd7d3bbd904e627f34c598bf81a0b95d0a37999038fe395d58e43faffd887342f1e98f76e01826983ddf265edad4cde307d602aafc2acd2e798a2995888bb8bdde55aca3b66fdfe422988c20a375128401244867eee94cf8bf2ce22340ddf7bd555c47436c5cf073f51f98ebed18ef324e799074dc4bd5d647333800bdc5e92e9f6319ae591176badcb129d7a921df9ca48d3cfebe28398376e688cc2391f934f9b4eeec8170ecd48d35180bf064603ac04ae8ed92c04b47de1e855444c6881210e121185dbe28de077a5ff4d37f71f558819ddc1b4e18b55ffc41c94461b4825d2fba8e602a9383b00c9007c74dde86464a52674e25020308952aa6eaeabab507914b2aa47c2e30a69d547aee3cb4c7c45aa876069c490d34dc71a972800c8e8fed97f5b1f74723e1b70e461911210acf6d86eac71e798f075f13ac2af23c8e0450772955154aaaea5f034e1cbc2533ae838ae11518ae2b74483443f8ac3c20fcc70858acb247ff2b6a5b1dc8dd2b1eb9acca005158a41105ba238d69f0cefd0b5480d5db871152131a55a9307bfeb5405354eeb35d8aa633ba5e2a243f9faf9667df3f19c672a6f0228f7d68f36d051f2279355bb97105bfbd3a805d4d6de604cb376a122361e3541b7f08b8d028133417b7ed02959d6b7bdeaa39ba186fd8c55014388320b070aaeec1b88ee37c08cfc0091beeb517b326b9e2c808aa6c5d06be29aa9f1649185586961e222aa6e0f157f2f36cf0f98ed9f7fb2a4c10a55318ce255af589f57fbbdcc352806b4cb7611da5b5eee72ac28292dd25bc4be70bf800706b187e76bccbf0bafd53424b1d07543975a67acc3f888a6d3916780df2b0e9411a2f7898e2f10d07b6e3b109475796574057e60f9fe36a1a58a63c1f1c084823ab1877f0e2f02b18fe6136d3d5d30dfe7dffa8b58add3db0de34e938dc0becf70a5e9341ac3ebfda01a036c4a0d4dececd2965be31d3d346d05b60b1c2616666e5914c2c662558a827984c7fbc5f943f14b6e8faa9178d1b3ccea2ffc8764ec611ff78507a1ca4b5545b9ab41365024fd360bda4265633bbe44a881875bdbdac8a8cda89a4e93fc5d22c68e42ca7efacbb6aeb5d2737dbdadae4aa3db6c2126f50b194cf010838ebcea9be06fdd5b6aa41a90d3f557bfca608b335eea9e71bac05df816adace1299a4729bd22d554a68bf911a827e52f696a4e80df752af527edef2d4ab73dcdc045c75cb3fd24d586048b77986cdbf62b67a36ef409934ef8b09379f0af156f1b03369c847ef8a8e33ebc99207f84104d843f19ec5d8264b3653924952a0e9e18bcc9a5a1ce66095cd0d230cbeb6f57302d3aedc57c067dc377b7f7064ea9c2ef10eae867e6a6f2c66b73e365d312049e51217674a8b10e0691a9bc73b0ec36d374bb7cd583f1ccb3c796f891f83347bceda94fa494a7b45426899d2649549e6b023d8b88d379837f30844fde0496223bf231f9a4ee9f8df59bfdeccceb243b6e493ab0dbe71cd790072e64fff4adfb272a6e61997cb4eeaee2e61597dea443db534ec2f3ebd6af0379abbf6359194b0dba14edff8d8ec7ef508d5db33d805e814b8cf8eeee8a9a245ebceeb62846ad806516c1b1e57a073b355d2acf841a983b537e583a7a1b7daa479f062618c8433176d7f50d33feffbfa4b6a404fd2e9fc022b853cbccd2d60c0dccd5f89db2b571aa244a74cccd0a1affd85bcefb0c4fc29e684b823af56bf1d8f618f0f4854b687974acea386b392d77f2f2e184e5d39474749eb3c1e980e5d69c35151184b734b6c34efa9632b14d69b0cb1365d430f7c6f11589b1d2949126bce580437688fb70c84897bee9dfe1d8555706305a10b4b58709f56ae7d37f310a7d876e53f5ef2b236aad634c0948b00eb37c91cee9507cd409b2dfdce9dbd4feb0680d41dff2200bc04a5fc7b177bc475459b1ed05a82070a330c9fc7983960f333026bb3dfc2f9630c44b0fb19f2f77f9ded6abc55a7b0107319f30e4bb45c621102743e4f8b686cd32d8ebd63df83fb5b3d2f9f1ed88a08517e288958bb8b66ecbfa1c87fa1ea397d8e6b20ac3eb2b178d265b72fb3906e847a9a2531ea66760b89ae137a7760d5c551589ee2c8552e6c81663a05e9f15f92bd2e14e67ea11236275a53357c39e50fc46369cf62f0b316f13bf9d640e5c651d60af8f921faa7cb672bd045e22a4b681802fa61c492dc3342a066599e659202f4ea1b04b65bbbb2a2844e861d63bfba2b678ee7528ed8e2e6395377aaaa808eeaf300fd0efa8a0abafe97bd6f9bc889e6a842100657214f9bc9bbce23fab9493b3d336e20bfc1558efd42907da2a1591c047e2157182cc2e5462297736e07217e122afc8cd9477fe8cc1d2efb8dc9a73f67defc7916b6e0fb46b1f4847898aa91987ff5fe9a7a30ecd1df7ac0266a00296aa77f6090669ac5c489dd3870792865380d66970c9e14fc3c3ebe8120ab8cdc1b0dd986bc136e4d3232c8b15ce37d660932435bb9b88ff806995172684233d1ad290f31e8e26109105655610275a1dcf2c32aac304f3cf11d921479858d131da6aba8f6a7b6967c2c28fa2c67e26e176fc217f02622ec7b9756edf0e9333589a77df383e58ad401ffbe96cd664ffcd9c376ec5115df2afb32ad9ee3df9a2af11607d6981babc168fd0d142d80f363a60ff1547cd4b02687035972daa7833438d83c50f37530255b2f088de8ed42f8079a3c7232fff0a2a825a5154aa918de563ea7b6fc7710109cd76225fc3b29f6a50d059b4b641c37b51846d4f5407c3da70caffab974df154fbd2b6282ca5a76a0f103e1df53c3690579a44cd79c7dbed96152ff5e17aa8b7eb992e56f9293c580ea66c235e9cd16e38c82bd301e30110b236d12c65714f5bf972471dc7ab9c05c5b05e49a98d5a102d190f7409a7f030cfd9e02dd5da821a2a94d45a5e70907ad43d8960e6cb33f458fa6a05a012c34c7b6518a6d1f92a452b59c40df507bf0639e8dfb94951bb12e54353bcfb375145f4293d8dc042bd165f508ee84a9307034ea0f29d03fe713ed3943ef3f78e90c66a071b6e75807f2c7ed5cf7d76caa771e53ddf2abaf27d2a9aab626f1a8a86d5f95828e000ae2d7dcfb9d4fbfca3803d1573cb5b08782ca0e3495d2c0c4c50f9fe71d0bf36db4b80170e66aceae8ab87bda7bcfba7aca6e13914da8042323777b1f125af90b15a9af281117badebefcd0045eded9a59792589ce88d73383ad22c5ee7dfd8eccac85d95810636c9c9c2a98a186bad418801c69f12e498467be32b03da657501329a658cafc968b9c3e53c1a64350e7c71a55ee067ce655174e523bb1c5e5222db0172775758fd3e7f933dfaf9ad4325ae8baaec060fa921844c9d8dadbfe376f624c285aa963d45545206236d3f082b411deef80a827311bd4e17e09205d087d6633f16336f5722e7017b28b862dd094482891edb4de00aa1341f9b4660d8358329d26840848d41a48131d582d4a3e034dd098a99802f59f52a19d92dd4d05b48eac81c49c253b4286c1f913c9adfa3943bbc5ae2c11252e3c291b72a6e44eb9f259d1c1f3596471c2a12b791445aeaaebdcf543d5cc1d3bd143b77ba5a56e9b63369bbc2e5c99c2fdfdf32fa3344f5237fe1a3697747b20670cf5885d1e08d57d7bef20194aef3bc1cd42ee4b9b8396a381409d88665e6779c478e1ac24db907f05ff0c5d660f816f4cf897d52481f38be8df43588762d4f8ab7aa0cc004581a6e23ce5ee28962e2e0a7a2714757b818f9f6527dea30bd496150a4254a9db14de3c63c3daf697d196a91ef76a17284c61cf2e6b68e718456aeb7ccb3268170ad9738265eba9e5bfa05d2ad97dbf6f4e7b27e07a31037025504c3c4ae5ed8cfb29ad312781d2a5fca29142802fe14b86f35230c0c883a3cc08f0c904823f2e7965b281952b92dbcca01156eaad51d6cbe49cf544210dd3eb47cc09545924f3cc18bb96ca4fc27f9d78f6b772d6be1d8b3c468ff8d82a98fabcfc6fd3deea0f8ad25f0c80e3826d16a824a4a28404caafb6a680b9b06b8d26a383be789ddc5cee31a602521936524e348a0a56df368e44c608d477e380f9bcb4253b669563e13e895540ffb6b513ff0f915d016b9018c59e10d35b2f72805460ee38208e74989537d85a61ce6a4f4a2857cb4da34c60f57abc42d0aa300dd623c26ae4ec8c34d8538944a3eb3cdf01794a9b079f74b30fb57833e3507dc23a898927f6c7a52ed19aa38289de0558c555b283104b6891aeca192dd94ec2fe7aee109a62ed385eb1bae4b577c63aa223d3bb8c5f3252c366a1f79046732c4cff0e99d5cce820ba19590b110d8cf5282bfe5514369e9728419cb1552edd3561c24f068994bfdc72ac27ce1b1c1e137d2fbca6002971d913434697fd289208a0993fb3974b86c2beccf99868741314dd5fd7cefcc2ce3c8748cb26f9d82e26722381ec05bffc3dc1e18b61b502c48d53f7aaa754eeaae4b6293c939bd86421e58afbf519ba1f646586317d30eca61eae5211a3dc83cc120b3c268875e2c82cc1c90e913967727eece00b69b8a046b9c16d232c6a40097e8fc0c132dc9d3b4e11d7bce3fb5707e50669e1f26e221bf6abe03503b04c7c4336ae70ffcb513ce9d9eeea5004d7ba267d6fdb2ddd08dfe69485240d18048a0584c070e9401e5eee701d1f5086beb7495dacea246d7be058ebfd5c3963537c576f354149854210fd2a78783aaffa142b9251eedde8d701833204538186b9760b5365fe689ed39fb1df761085ba8258a05288f5d82d18cb6dd550ba969e44ad6d9e9359fedc9981f6f0251be11355e7b208aff451f149aa9dc3eb1a496edc6e19b90e280b5a9d2d6d7800e40a8b33c8aa7f987839147f5ac1389dafa097adbeea042c2cc236e158334551d5c02c6a6028f03ce228ea8f292a6af65318e8089df0c3a2e8efe1ac31406675926e92ffa3faad0926022283524f4d116919e566f720aa947ab54d9d94ac4b1cce7d343eb104e87e76cb6199bb8c240246a5ada8242b2bf82c2e0e8748ddccc8579ee1f490ceedd859b58d3b4b3dfff957aa5826337a5913251e17bdf9a293757674303af89b38f9d8c3c3635769b2803afb4aeb62b5ca5c6b0cb737a9fffe1024fdf473f1d4bd1e5aa3d0551e41d5b331acd4ecd52c16f470861e9045186ce3ea906386756786f7ae7b0c599eaa12fe7a3017b1fd1ff3a5514980de8f1c5012e1a3ee2eb8d0b5e0cc332768a09a9d34b6f4340d0cebfdb6307561a6880b6a785146fc2e607da70db4954649f625832d20d292eaa6e761cb63ec0108b5ab4dfce258d8e4465fd24f04ade2b6298538112ce74d3dd45a13d9acb1ea96a547ca390682c404db6ca6ec11aba1f3bc430e6cb09af0f040bc410ef6fcbe29b68d453293800d1027010b2751d4ce55410a4aeff4b1defb63108faf1b2652c8795d05acdd52f1600b39d44b05833023a4a592c88936c0ac7e3f39a9f9a424f05d3158ace04fd30511e015a58a4815871e3e85221d3cf28e7976952df7aac23f338e5ef503b86b9c3632c8f118ee020ef93105b91d5de3dfede4acc83123cd1d56c9228b291a2a2bdd8f61e2734a208251b110b394785d542a1c46b4495b16c72a8010bdba71769cad6f64f38e6d9e3d145d5c150eff8b998c0f1", 0x1000, 0xdc00eaa}, {&(0x7f0000003640)="4388a9cbf87661d5525ab96898668364125370e0f6e0a5a6f4b1023a1962c2ba81b15e843f29c12c1314567edd579e99e2082eeef88d3be489cfa26f194e43ced05511940f93327d17be7441183985b8b98ab10eaa3f4174380ff95b78fed4e97a172e61029b5b13db9b507b66e6eb6b2c9e880a5de4f005310d4dfffb26135bd6581b156adb0755b3de07c8133af428de7f7203dd831c398cf5e64db06dcb0ff21834d574efee384d60d6d3377b69f6bde9f069f55ee0f209bfbb19cb68c3d4d98ec7b16de758bf487248719496d8674059cd197ebdcef2a71da724fc135b198fc4f38d", 0xe4, 0x1}, {&(0x7f0000003740)="90033425a9f6e5bb8b453e589ad0dd345714146a56276010112f6bf8bf8eacd7253e4c4cf15f625aa9054d8bfae33a4c7f69c780c146fee17c3e03a4d71c7fbbac0d64d105fa527f1e60a33017477b94", 0x50, 0x1}], 0x24002, &(0x7f0000003ec0)=ANY=[@ANYBLOB="6e6f646f747312646f74732c61756469742c7375626a5f747970653d002c00d80c53cf2dc3dae7654ea13e23990bc5cd427e53895b953c77dadd6b9bbf04e8d40e19a9e256fcbd12b287eb9f0402a54b0542e50a6d0be4eaa278a2ca4082c83b593f7b150d516867f15ba7c8f1e0c1f4c6c3f8135fec3cf46ce7d639bb7644272ab9429b2514bd7dd10ff93f3ef692dc6e291fbe4f35566a18d366c852b49302039d3deb9113e24616d7a19dcc847ec40a6fd4bde9b5025f9a2aef8e083292ce4c6287bdff4ff3be1c0fb1c9a1d9cb5191daab629bbcc31f443623d1d96d9eb08bd7cc618c590838237ce1cd4e7347dc0f1d9f92df6bbbfd14f165e5dcdd108351d5128f829a109b7c61bf0f021e779bb045a66837cfd3847d40c897e0e88d6305152151d1837698ad6b52d0fd0e2ef900000000000000"]) 16:52:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 16:52:50 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbf03, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000fff100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60007fff100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 788.731621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 788.761156] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 788.768839] (syz-executor.2,23035,0):ocfs2_parse_options:1499 ERROR: Unrecognized mount option "[(" or missing value 16:52:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 16:52:50 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xea26, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000feff100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 788.865527] (syz-executor.2,23035,1):ocfs2_fill_super:1225 ERROR: status = -22 [ 788.885638] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 788.923436] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 788.996237] (syz-executor.2,23054,0):ocfs2_parse_options:1499 ERROR: Unrecognized mount option "[(" or missing value [ 789.013288] (syz-executor.2,23054,0):ocfs2_fill_super:1225 ERROR: status = -22 16:52:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100001b, 0x12, r0, 0x38509000) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 16:52:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000030000001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:53 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000000) dup3(r3, r2, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000000) sendfile(r3, r6, 0x0, 0x1ff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = accept4$netrom(r3, &(0x7f0000000180)={{}, [@null, @default, @bcast, @null, @rose, @default, @rose]}, &(0x7f0000000080)=0x48, 0x800) connect(r8, &(0x7f0000000200)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x80) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:52:53 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xedc0, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000001400070020000000000000050000000000", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 791.777337] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 791.790627] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000030001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 16:52:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000001400070020000000000000050000000000", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 791.846619] audit: type=1800 audit(1625849573.740:2853): pid=23101 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14948 res=0 [ 791.868908] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 791.887025] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 16:52:53 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xff0f, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 791.966603] audit: type=1800 audit(1625849573.860:2854): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14948 res=0 16:52:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 792.027909] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 792.045694] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000050001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000001400070020000000000000050000000000", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 792.136227] audit: type=1800 audit(1625849574.030:2855): pid=23101 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14948 res=0 [ 792.172181] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 792.209958] audit: type=1800 audit(1625849574.060:2856): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14948 res=0 [ 792.214005] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:52:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, 0x0, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd(r0, &(0x7f0000000080)={[0x3]}, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(r2, 0x0) 16:52:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000060001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 16:52:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:56 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x3ffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000070001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) [ 794.901269] nla_parse: 2 callbacks suppressed [ 794.901279] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 794.922768] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:52:56 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x40000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 794.956830] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 794.981628] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:52:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 16:52:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 795.129786] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 795.142573] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 795.146760] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 795.167336] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, 0x0, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:52:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) recvfrom$unix(r1, &(0x7f0000000180)=""/202, 0xca, 0x20, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 16:52:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000a0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:52:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16:52:59 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x1fffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000b0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 797.979796] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 797.988511] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:52:59 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x810000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:52:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0), 0x50040, 0x0) sendfile(r0, r2, &(0x7f0000000100)=0x6, 0x40) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r3, r4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={@desc={0x1, 0x0, @desc4}}) [ 798.023428] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 798.052016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 16:53:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000001400070020000000000000050000000000000001080005", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 798.201026] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 798.224707] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 798.232182] erofs: read_super, device -> /dev/loop5 [ 798.232191] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 798.236871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 798.254913] erofs: cannot find valid erofs superblock [ 798.262172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 798.305340] erofs: read_super, device -> /dev/loop5 [ 798.310484] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 798.319998] erofs: cannot find valid erofs superblock 16:53:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, 0x0, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ftruncate(r2, 0x8) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000012c0)="debf5304072be9d140c730f976dc150200ca15acbba51ce20d3da1ca3349c9c898018afb415c6595ddbbf58946b5b9349df744dc18347205e1a94ac0b40fcd525ac3031900004234fa723a1bd04651f440c401a6888de2bc84a3e7c4931fa2fe7b9ad3dd91918f2f8e074259e1a04c0a86ccc61df82fd7fbbb3ae1c6efa41f3214874e1df9a491eae0738bcaf045a780f71b1d20feba", 0x96}, {&(0x7f0000000100)="53b5d322083bec90d23874581c7adcc3f5d6492ebaa4b79a6dc670b33023d3d643713df5d1fc0744", 0x28}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001200)="133c0764f047a2f192", 0x9}], 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x278}, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f00000000c0)=0x5, 0x4) 16:53:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000d0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000001400070020000000000000050000000000000001080005", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 16:53:02 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x1000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000e0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 800.986682] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 800.995200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 800.996333] erofs: read_super, device -> /dev/loop5 [ 801.022280] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 801.043120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 801.050172] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, 16:53:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 16:53:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x40010, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(r1, 0x1ff, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x2, 0x4) [ 801.094425] erofs: cannot find valid erofs superblock 16:53:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e65766500002000028008000100010000001400070020000000000000050000000000000001080005", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000f0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 801.182160] erofs: read_super, device -> /dev/loop5 [ 801.211750] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 801.216040] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 801.250965] erofs: cannot find valid erofs superblock 16:53:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000002100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 801.262654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 801.294740] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 801.325037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000003100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:05 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:53:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 16:53:05 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x2000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 803.982144] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 803.994621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 804.007463] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 804.012288] erofs: read_super, device -> /dev/loop5 16:53:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000004100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:06 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$P9_RREADDIR(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="c500010029020000100000010000001c050000000000000007000000000000000107002e2f66696c65302004000000050000000000000000100000000000000107002e2f66696c65302002000000040000000000000004000000000000003f07002e2f32efb866696c65300801000000030000000000000003000000000000000507002e2f66696c653040000000000200000000000000ca000000000000000007002e2f66696c65301004000000080000000000000006000000000000008007002e2f6669"], 0xc5) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000180)={0x0, 0x2, 0x0, [0x0, 0x5, 0x7e, 0x401, 0xfff], [0x0, 0x9, 0x5, 0x3, 0x5, 0x9, 0x0, 0xba, 0x6, 0x7f, 0x10001, 0x2ce, 0x1000, 0xfff, 0x40, 0x8, 0x8, 0x3, 0x9, 0xfffffffffffffffc, 0x4fe5, 0x8, 0x7, 0x2e2, 0x6, 0x6, 0x7c, 0x7, 0x75, 0x3800000000000, 0x3, 0x10000, 0x101, 0x4, 0x5, 0x0, 0x100000000, 0xf62, 0x9, 0x7ff, 0x1, 0x10001, 0x8, 0x6, 0xccc, 0x8, 0x2, 0x8, 0xbe8, 0x40, 0x1ff, 0x8, 0x1d, 0xb87f, 0x5, 0x6, 0x7f2, 0x3, 0xf3e, 0x6, 0x696a, 0x80000000, 0x20, 0x5, 0x27a0000000000, 0xa, 0x400, 0x80, 0x40, 0x6, 0x3, 0x1, 0x2, 0x401, 0x5, 0x200, 0x0, 0x7, 0x800, 0x10001, 0x8, 0x0, 0x5, 0x73, 0x8000, 0x1, 0x1f, 0x10001, 0x40, 0x6, 0x4, 0x3, 0xe1, 0x7, 0x1f, 0x100, 0x400, 0x7, 0x8, 0x8000, 0x3, 0x4, 0x6, 0x7fffffff, 0x4, 0x2, 0x3, 0x8, 0x3ff, 0x6, 0x1f, 0x6, 0x68a6, 0xffffffff8f9de3dc, 0x7, 0xfffffffffffffffc, 0xffffffffffffff7f, 0x6, 0x7, 0x200, 0x7ff]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000080)=0x80, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000700)={r0}) sendfile(r4, r5, &(0x7f0000000740)=0x3, 0x6) bind$inet6(r3, &(0x7f0000000780)={0xa, 0x0, 0x2, @loopback}, 0x1c) [ 804.033631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 804.056579] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, 16:53:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 16:53:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 804.115686] erofs: cannot find valid erofs superblock 16:53:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000005100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xffff, 0xd1, @rand_addr=' \x01\x00'}, 0xffffffffffffffe2) [ 804.172768] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 804.184379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000006100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 804.222505] erofs: read_super, device -> /dev/loop5 [ 804.230275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 804.231243] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 804.251197] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 804.322942] erofs: cannot find valid erofs superblock 16:53:08 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x0) 16:53:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000000) dup3(r3, r2, 0x0) sendfile(r3, r1, 0x0, 0x8001) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000080)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000100)=""/63, 0x3f}], 0x2, &(0x7f0000000280)=""/188, 0xbc}, 0x40000001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 16:53:08 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x3000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000007100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000008100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 807.050467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 807.073381] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 807.081230] audit: type=1800 audit(1625849588.971:2857): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14642 res=0 [ 807.101350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 807.104152] erofs: read_super, device -> /dev/loop5 [ 807.116234] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 807.133290] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:09 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x4000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 807.175247] erofs: cannot find valid erofs superblock [ 807.194767] audit: type=1800 audit(1625849589.091:2858): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14642 res=0 16:53:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 16:53:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000009100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 807.268465] audit: type=1800 audit(1625849589.091:2859): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14642 res=0 [ 807.320310] erofs: read_super, device -> /dev/loop5 [ 807.325953] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 807.355469] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 807.366394] erofs: cannot find valid erofs superblock [ 807.398897] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 809.628712] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.634318] ieee802154 phy1 wpan1: encryption failed: -22 16:53:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xfb00, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7, 0xef, 0x7f, 0x400, 0x8, 0x200204}) 16:53:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000a100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:11 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x5000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 16:53:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 810.117205] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 810.133910] erofs: read_super, device -> /dev/loop5 [ 810.144941] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, 16:53:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000b100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 810.166211] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 810.181168] erofs: cannot find valid erofs superblock 16:53:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x68}, 0x0) 16:53:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 810.325879] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 810.339773] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:14 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x6000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000c100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 16:53:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000e100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 813.122170] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 813.144290] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 813.178873] erofs: read_super, device -> /dev/loop5 16:53:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x74}, 0x0) 16:53:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000f100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 813.200935] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 813.238840] erofs: cannot find valid erofs superblock 16:53:15 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x7000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 813.303125] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 813.307712] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 813.331601] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000010100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 813.390653] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7a}, 0x0) [ 813.450521] erofs: read_super, device -> /dev/loop5 [ 813.466316] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 813.481695] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 813.482374] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 813.523427] erofs: cannot find valid erofs superblock [ 813.539469] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 813.549827] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 813.595199] erofs: read_super, device -> /dev/loop5 [ 813.604949] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 813.627911] erofs: cannot find valid erofs superblock 16:53:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB], 0x60}}, 0x0) 16:53:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000048100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 16:53:18 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x8000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 816.192604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 816.210098] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 816.219247] erofs: read_super, device -> /dev/loop5 [ 816.225933] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, 16:53:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000004c100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 816.234869] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 816.251913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 816.285370] erofs: cannot find valid erofs superblock [ 816.302447] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 816.352756] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 816.413569] erofs: read_super, device -> /dev/loop5 16:53:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000060100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 816.439297] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 816.501242] erofs: cannot find valid erofs superblock [ 816.521926] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB], 0x60}}, 0x0) [ 816.563873] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:18 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x20000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000068100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 816.617141] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 816.647040] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 16:53:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0xffffffff00000000}, 0x0) 16:53:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 816.781965] erofs: read_super, device -> /dev/loop5 [ 816.802921] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 816.812739] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 816.835817] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000006c100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:18 executing program 2: io_setup(0xea, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2, r0}]) mlockall(0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r2 = fork() perf_event_open(0x0, r2, 0x3, r1, 0x3) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 816.852822] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 816.896936] erofs: cannot find valid erofs superblock 16:53:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000070100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 816.947268] erofs: read_super, device -> /dev/loop5 [ 816.955984] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 816.956321] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 816.977267] erofs: cannot find valid erofs superblock 16:53:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 817.046592] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:19 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x3f000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000074100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 16:53:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000007a100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 817.205913] erofs: read_super, device -> /dev/loop5 [ 817.224086] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 817.244927] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 817.264740] erofs: cannot find valid erofs superblock 16:53:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000086100001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe4f}, 0x0) 16:53:19 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x60000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000580)) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000400)=""/255, 0xff}], 0x6, 0x5, 0x200001) unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x40000040, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20}, 0x1c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r7, 0x0, 0x0, 0x121, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1e, 0x0, "75f1f1f2ff5ea649636f38aa83a31e36c5eef049c0b7381a1a0df80bcdab017d96189f419995bdbf1f71a4505c5ec2aec17a4af3183861a41265a2c90d9f0525ee13765822d60308da1666b14d2ca3b3"}, 0xd8) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x406f408, 0x0) 16:53:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) [ 817.745844] IPVS: ftp: loaded support on port[0] = 21 16:53:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000110001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 817.790740] erofs: read_super, device -> /dev/loop5 [ 817.823087] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, 16:53:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f0", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 817.884347] erofs: cannot find valid erofs superblock 16:53:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 817.962336] erofs: read_super, device -> /dev/loop5 [ 817.974310] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, 16:53:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 16:53:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f0", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 818.004164] erofs: cannot find valid erofs superblock 16:53:19 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x83030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000140001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:20 executing program 2: io_setup(0xea, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2, r0}]) mlockall(0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r2 = fork() perf_event_open(0x0, r2, 0x3, r1, 0x3) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4010, r3, 0x3dc29000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfb, 0x0, 0x0, 0x3, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 16:53:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f0", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:20 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x84030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000002f0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 818.644979] nla_parse: 16 callbacks suppressed [ 818.644988] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 818.707714] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 16:53:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000670001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0) 16:53:20 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x85030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000700001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:21 executing program 3: io_setup(0xea, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2, r0}]) mlockall(0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r2 = fork() perf_event_open(0x0, r2, 0x3, r1, 0x3) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4010, r3, 0x3dc29000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfb, 0x0, 0x0, 0x3, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) write(r4, &(0x7f0000000080)="b9f4506785596fff11713e198ee7429c20d8059f24cbd5ce953bc683f6a45ba210c7a3e53af6241d74d990810441ee913360c7682141af171678", 0x3a) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 16:53:21 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 16:53:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000020001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:21 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x88030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000030001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 819.712754] FAULT_INJECTION: forcing a failure. [ 819.712754] name failslab, interval 1, probability 0, space 0, times 0 [ 819.770967] CPU: 1 PID: 23753 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 819.778967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.788416] Call Trace: [ 819.791026] dump_stack+0x1fc/0x2ef [ 819.794671] should_fail.cold+0xa/0xf [ 819.798484] ? setup_fault_attr+0x200/0x200 [ 819.802812] ? lock_acquire+0x170/0x3c0 [ 819.806799] __should_failslab+0x115/0x180 [ 819.811044] should_failslab+0x5/0x10 [ 819.814848] kmem_cache_alloc_node+0x245/0x3b0 [ 819.819618] __alloc_skb+0x71/0x560 [ 819.823251] netlink_sendmsg+0x9ee/0xc40 [ 819.827318] ? aa_af_perm+0x230/0x230 [ 819.831122] ? nlmsg_notify+0x1a0/0x1a0 [ 819.835098] ? kernel_recvmsg+0x220/0x220 [ 819.839258] ? nlmsg_notify+0x1a0/0x1a0 [ 819.843237] sock_sendmsg+0xc3/0x120 [ 819.846961] ___sys_sendmsg+0x7bb/0x8e0 [ 819.850942] ? check_preemption_disabled+0x41/0x280 [ 819.855964] ? copy_msghdr_from_user+0x440/0x440 [ 819.860726] ? __fget+0x32f/0x510 [ 819.864189] ? lock_downgrade+0x720/0x720 [ 819.868340] ? check_preemption_disabled+0x41/0x280 [ 819.873364] ? check_preemption_disabled+0x41/0x280 [ 819.878398] ? __fget+0x356/0x510 [ 819.881858] ? do_dup2+0x450/0x450 [ 819.885400] ? lock_downgrade+0x720/0x720 [ 819.889552] ? vfs_write+0x3d7/0x540 [ 819.893284] ? __fdget+0x1d0/0x230 [ 819.896830] __x64_sys_sendmsg+0x132/0x220 [ 819.901064] ? __sys_sendmsg+0x1b0/0x1b0 [ 819.905125] ? vfs_write+0x393/0x540 [ 819.908858] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 819.914226] ? trace_hardirqs_off_caller+0x6e/0x210 [ 819.919245] ? do_syscall_64+0x21/0x620 [ 819.923310] do_syscall_64+0xf9/0x620 [ 819.927118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 819.932306] RIP: 0033:0x4665d9 [ 819.935494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 819.954395] RSP: 002b:00007f2fccbd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.962113] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 16:53:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4f0e}, 0x0) 16:53:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 16:53:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 16:53:21 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x8cffffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 819.969484] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 819.976868] RBP: 00007f2fccbd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 819.984228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.991513] R13: 00007ffc41e505af R14: 00007f2fccbd1300 R15: 0000000000022000 16:53:22 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 820.247461] FAULT_INJECTION: forcing a failure. [ 820.247461] name failslab, interval 1, probability 0, space 0, times 0 [ 820.286110] CPU: 0 PID: 23782 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 820.294024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.303383] Call Trace: [ 820.305985] dump_stack+0x1fc/0x2ef [ 820.309646] should_fail.cold+0xa/0xf [ 820.313458] ? setup_fault_attr+0x200/0x200 [ 820.317781] ? lock_acquire+0x170/0x3c0 [ 820.321791] __should_failslab+0x115/0x180 [ 820.326027] should_failslab+0x5/0x10 [ 820.329826] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 820.334935] __kmalloc_node_track_caller+0x38/0x70 [ 820.339866] __alloc_skb+0xae/0x560 [ 820.343493] netlink_sendmsg+0x9ee/0xc40 [ 820.347558] ? aa_af_perm+0x230/0x230 [ 820.351357] ? nlmsg_notify+0x1a0/0x1a0 [ 820.355329] ? kernel_recvmsg+0x220/0x220 [ 820.359490] ? nlmsg_notify+0x1a0/0x1a0 [ 820.363469] sock_sendmsg+0xc3/0x120 [ 820.367186] ___sys_sendmsg+0x7bb/0x8e0 [ 820.371166] ? check_preemption_disabled+0x41/0x280 [ 820.376207] ? copy_msghdr_from_user+0x440/0x440 [ 820.380971] ? __fget+0x32f/0x510 [ 820.384427] ? lock_downgrade+0x720/0x720 [ 820.388577] ? check_preemption_disabled+0x41/0x280 [ 820.393612] ? check_preemption_disabled+0x41/0x280 [ 820.398640] ? __fget+0x356/0x510 [ 820.402094] ? do_dup2+0x450/0x450 [ 820.405632] ? lock_downgrade+0x720/0x720 [ 820.409789] ? vfs_write+0x3d7/0x540 [ 820.413508] ? __fdget+0x1d0/0x230 [ 820.417059] __x64_sys_sendmsg+0x132/0x220 [ 820.421298] ? __sys_sendmsg+0x1b0/0x1b0 [ 820.425361] ? vfs_write+0x393/0x540 [ 820.429089] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 820.434464] ? trace_hardirqs_off_caller+0x6e/0x210 [ 820.439484] ? do_syscall_64+0x21/0x620 [ 820.443465] do_syscall_64+0xf9/0x620 [ 820.447269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 820.452456] RIP: 0033:0x4665d9 [ 820.455646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 820.474542] RSP: 002b:00007f2fccbd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.482249] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 820.489512] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 820.496779] RBP: 00007f2fccbd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 820.504060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.511352] R13: 00007ffc41e505af R14: 00007f2fccbd1300 R15: 0000000000022000 16:53:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:22 executing program 3 (fault-call:2 fault-nth:0): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000040001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) 16:53:22 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb5030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:22 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 820.930514] FAULT_INJECTION: forcing a failure. [ 820.930514] name failslab, interval 1, probability 0, space 0, times 0 [ 820.944587] CPU: 1 PID: 23806 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 820.952537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.962162] Call Trace: [ 820.964769] dump_stack+0x1fc/0x2ef [ 820.968409] should_fail.cold+0xa/0xf [ 820.972225] ? setup_fault_attr+0x200/0x200 [ 820.976557] ? lock_downgrade+0x720/0x720 [ 820.980804] ? check_preemption_disabled+0x41/0x280 [ 820.985849] __should_failslab+0x115/0x180 [ 820.990094] should_failslab+0x5/0x10 [ 820.993897] kmem_cache_alloc+0x3f/0x370 [ 820.997965] skb_clone+0x151/0x3d0 [ 821.001509] netlink_deliver_tap+0x955/0xb00 [ 821.005924] netlink_unicast+0x545/0x690 [ 821.009991] ? netlink_sendskb+0x110/0x110 [ 821.014230] ? _copy_from_iter_full+0x229/0x7c0 [ 821.018905] ? __phys_addr_symbol+0x2c/0x70 [ 821.023229] ? __check_object_size+0x17b/0x3e0 [ 821.027826] netlink_sendmsg+0x6bb/0xc40 [ 821.031894] ? aa_af_perm+0x230/0x230 [ 821.035725] ? nlmsg_notify+0x1a0/0x1a0 [ 821.039718] ? kernel_recvmsg+0x220/0x220 [ 821.043872] ? nlmsg_notify+0x1a0/0x1a0 [ 821.047858] sock_sendmsg+0xc3/0x120 [ 821.051582] ___sys_sendmsg+0x7bb/0x8e0 [ 821.055571] ? check_preemption_disabled+0x41/0x280 [ 821.060596] ? copy_msghdr_from_user+0x440/0x440 [ 821.065357] ? __fget+0x32f/0x510 [ 821.068824] ? lock_downgrade+0x720/0x720 [ 821.072978] ? check_preemption_disabled+0x41/0x280 [ 821.078184] ? check_preemption_disabled+0x41/0x280 [ 821.083207] ? __fget+0x356/0x510 [ 821.086666] ? do_dup2+0x450/0x450 [ 821.090243] ? lock_downgrade+0x720/0x720 [ 821.094396] ? vfs_write+0x3d7/0x540 [ 821.098118] ? __fdget+0x1d0/0x230 [ 821.101665] __x64_sys_sendmsg+0x132/0x220 [ 821.105901] ? __sys_sendmsg+0x1b0/0x1b0 [ 821.109966] ? vfs_write+0x393/0x540 [ 821.113769] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 821.119142] ? trace_hardirqs_off_caller+0x6e/0x210 [ 821.124165] ? do_syscall_64+0x21/0x620 [ 821.128148] do_syscall_64+0xf9/0x620 [ 821.131960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.137155] RIP: 0033:0x4665d9 [ 821.140358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.159359] RSP: 002b:00007f2fccbd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.167168] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 821.174441] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 16:53:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 16:53:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000050001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 821.181708] RBP: 00007f2fccbd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 821.188999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.196268] R13: 00007ffc41e505af R14: 00007f2fccbd1300 R15: 0000000000022000 16:53:23 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb6030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 821.298485] validate_nla: 22 callbacks suppressed [ 821.298494] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000060001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 821.352349] FAULT_INJECTION: forcing a failure. [ 821.352349] name failslab, interval 1, probability 0, space 0, times 0 [ 821.364357] CPU: 0 PID: 23824 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 821.372266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.381627] Call Trace: [ 821.384230] dump_stack+0x1fc/0x2ef [ 821.387878] should_fail.cold+0xa/0xf [ 821.391806] ? lru_add_drain_all+0x5a/0x4d0 [ 821.396135] ? setup_fault_attr+0x200/0x200 [ 821.400473] __should_failslab+0x115/0x180 [ 821.404742] should_failslab+0x5/0x10 [ 821.408552] kmem_cache_alloc+0x3f/0x370 [ 821.412627] __debug_object_init+0x6d9/0x9b0 [ 821.417137] ? get_pid_task+0xf4/0x190 [ 821.421033] ? debug_object_destroy+0x240/0x240 [ 821.425703] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 821.430646] __init_work+0x48/0x50 [ 821.434314] lru_add_drain_all+0x242/0x4d0 [ 821.438562] migrate_prep+0xa/0x10 [ 821.442193] do_mbind+0x21d/0xd60 [ 821.445662] ? __mpol_dup+0x4a0/0x4a0 16:53:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000070001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 821.449487] ? wait_for_completion_io+0x10/0x10 [ 821.454166] ? get_nodes+0x218/0x290 [ 821.457899] __x64_sys_mbind+0x235/0x290 [ 821.461970] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 821.466300] ? trace_hardirqs_off_caller+0x6e/0x210 [ 821.471323] ? do_syscall_64+0x21/0x620 [ 821.475304] do_syscall_64+0xf9/0x620 [ 821.479114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.484308] RIP: 0033:0x4665d9 16:53:23 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 821.487507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.506411] RSP: 002b:00007f91edce8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 821.514135] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 821.521391] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 821.528644] RBP: 00007f91edce81d0 R08: 0000000000000000 R09: 0000000000000002 [ 821.535913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.543169] R13: 00007fff8c96c32f R14: 00007f91edce8300 R15: 0000000000022000 16:53:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 821.632736] FAULT_INJECTION: forcing a failure. [ 821.632736] name failslab, interval 1, probability 0, space 0, times 0 [ 821.671949] CPU: 0 PID: 23839 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 821.679875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.689244] Call Trace: [ 821.691850] dump_stack+0x1fc/0x2ef [ 821.695491] should_fail.cold+0xa/0xf [ 821.699322] ? setup_fault_attr+0x200/0x200 [ 821.703654] ? lock_acquire+0x170/0x3c0 [ 821.707671] __should_failslab+0x115/0x180 [ 821.711916] should_failslab+0x5/0x10 [ 821.715742] kmem_cache_alloc_node+0x245/0x3b0 [ 821.720340] __alloc_skb+0x71/0x560 [ 821.723991] netlink_dump+0x55f/0xc10 [ 821.727814] __netlink_dump_start+0x4e9/0x6f0 [ 821.732326] rtnetlink_rcv_msg+0x71e/0xb80 [ 821.736578] ? rtnl_fill_ifinfo+0x36d0/0x36d0 [ 821.741104] ? rtnl_calcit.isra.0+0x430/0x430 [ 821.745613] ? rtnl_fill_ifinfo+0x36d0/0x36d0 [ 821.750158] ? kfree_skbmem+0x140/0x140 [ 821.754150] netlink_rcv_skb+0x160/0x440 [ 821.758400] ? rtnl_calcit.isra.0+0x430/0x430 [ 821.762914] ? netlink_ack+0xae0/0xae0 [ 821.766829] netlink_unicast+0x4d5/0x690 [ 821.770900] ? netlink_sendskb+0x110/0x110 [ 821.775140] ? _copy_from_iter_full+0x229/0x7c0 [ 821.779811] ? __phys_addr_symbol+0x2c/0x70 [ 821.784155] ? __check_object_size+0x17b/0x3e0 [ 821.788842] netlink_sendmsg+0x6bb/0xc40 [ 821.793027] ? aa_af_perm+0x230/0x230 [ 821.796847] ? nlmsg_notify+0x1a0/0x1a0 [ 821.800826] ? kernel_recvmsg+0x220/0x220 [ 821.804987] ? nlmsg_notify+0x1a0/0x1a0 [ 821.809061] sock_sendmsg+0xc3/0x120 [ 821.812772] ___sys_sendmsg+0x7bb/0x8e0 [ 821.816761] ? check_preemption_disabled+0x41/0x280 [ 821.821779] ? copy_msghdr_from_user+0x440/0x440 [ 821.826638] ? __fget+0x32f/0x510 [ 821.830099] ? lock_downgrade+0x720/0x720 [ 821.834232] ? check_preemption_disabled+0x41/0x280 [ 821.839242] ? check_preemption_disabled+0x41/0x280 [ 821.844260] ? __fget+0x356/0x510 [ 821.847886] ? do_dup2+0x450/0x450 [ 821.851450] ? lock_downgrade+0x720/0x720 [ 821.855591] ? vfs_write+0x3d7/0x540 [ 821.859296] ? __fdget+0x1d0/0x230 [ 821.862833] __x64_sys_sendmsg+0x132/0x220 [ 821.867066] ? __sys_sendmsg+0x1b0/0x1b0 [ 821.871124] ? vfs_write+0x393/0x540 [ 821.874836] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 821.880217] ? trace_hardirqs_off_caller+0x6e/0x210 [ 821.885218] ? do_syscall_64+0x21/0x620 [ 821.889192] do_syscall_64+0xf9/0x620 [ 821.893003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.898223] RIP: 0033:0x4665d9 [ 821.901403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.920503] RSP: 002b:00007f2fccbd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.928312] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 821.935596] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 821.942886] RBP: 00007f2fccbd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 821.950166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.957438] R13: 00007ffc41e505af R14: 00007f2fccbd1300 R15: 0000000000022000 16:53:24 executing program 3 (fault-call:2 fault-nth:1): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) 16:53:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000080001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:24 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb7030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:24 executing program 2 (fault-call:1 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 822.194888] FAULT_INJECTION: forcing a failure. [ 822.194888] name failslab, interval 1, probability 0, space 0, times 0 [ 822.212084] CPU: 1 PID: 23859 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 822.219995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.229350] Call Trace: [ 822.231950] dump_stack+0x1fc/0x2ef [ 822.235590] should_fail.cold+0xa/0xf [ 822.239399] ? setup_fault_attr+0x200/0x200 [ 822.243718] ? lock_acquire+0x170/0x3c0 [ 822.247703] __should_failslab+0x115/0x180 [ 822.251939] should_failslab+0x5/0x10 [ 822.255743] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 822.260854] __kmalloc_node_track_caller+0x38/0x70 [ 822.265787] __alloc_skb+0xae/0x560 [ 822.269417] netlink_dump+0x55f/0xc10 [ 822.273228] __netlink_dump_start+0x4e9/0x6f0 [ 822.277847] rtnetlink_rcv_msg+0x71e/0xb80 [ 822.282087] ? rtnl_fill_ifinfo+0x36d0/0x36d0 [ 822.286680] ? rtnl_calcit.isra.0+0x430/0x430 [ 822.291179] ? rtnl_fill_ifinfo+0x36d0/0x36d0 [ 822.295687] ? kfree_skbmem+0x140/0x140 [ 822.299678] netlink_rcv_skb+0x160/0x440 [ 822.303739] ? rtnl_calcit.isra.0+0x430/0x430 [ 822.308240] ? netlink_ack+0xae0/0xae0 [ 822.312140] netlink_unicast+0x4d5/0x690 [ 822.316204] ? netlink_sendskb+0x110/0x110 [ 822.320436] ? _copy_from_iter_full+0x229/0x7c0 [ 822.325103] ? __phys_addr_symbol+0x2c/0x70 [ 822.329429] ? __check_object_size+0x17b/0x3e0 [ 822.334014] netlink_sendmsg+0x6bb/0xc40 [ 822.338079] ? aa_af_perm+0x230/0x230 [ 822.341977] ? nlmsg_notify+0x1a0/0x1a0 [ 822.346036] ? kernel_recvmsg+0x220/0x220 [ 822.350190] ? nlmsg_notify+0x1a0/0x1a0 [ 822.354171] sock_sendmsg+0xc3/0x120 [ 822.357885] ___sys_sendmsg+0x7bb/0x8e0 [ 822.361884] ? check_preemption_disabled+0x41/0x280 [ 822.366948] ? copy_msghdr_from_user+0x440/0x440 [ 822.371704] ? __fget+0x32f/0x510 [ 822.375159] ? lock_downgrade+0x720/0x720 [ 822.379312] ? check_preemption_disabled+0x41/0x280 [ 822.384328] ? check_preemption_disabled+0x41/0x280 [ 822.389347] ? __fget+0x356/0x510 [ 822.392808] ? do_dup2+0x450/0x450 [ 822.396436] ? lock_downgrade+0x720/0x720 [ 822.400585] ? vfs_write+0x3d7/0x540 [ 822.404301] ? __fdget+0x1d0/0x230 [ 822.407846] __x64_sys_sendmsg+0x132/0x220 [ 822.412082] ? __sys_sendmsg+0x1b0/0x1b0 [ 822.416142] ? vfs_write+0x393/0x540 [ 822.419872] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 822.425232] ? trace_hardirqs_off_caller+0x6e/0x210 [ 822.430264] ? do_syscall_64+0x21/0x620 [ 822.434235] do_syscall_64+0xf9/0x620 [ 822.438038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.443224] RIP: 0033:0x4665d9 [ 822.446414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.465312] RSP: 002b:00007f2fccbd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.473044] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 822.480321] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 822.487598] RBP: 00007f2fccbd11d0 R08: 0000000000000000 R09: 0000000000000000 16:53:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 822.494869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.502140] R13: 00007ffc41e505af R14: 00007f2fccbd1300 R15: 0000000000022000 16:53:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:24 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb8030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 822.562106] FAULT_INJECTION: forcing a failure. [ 822.562106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.613988] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 822.629577] CPU: 1 PID: 23865 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 822.637482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.646835] Call Trace: [ 822.649451] dump_stack+0x1fc/0x2ef [ 822.653093] should_fail.cold+0xa/0xf [ 822.656905] ? lock_acquire+0x170/0x3c0 [ 822.660887] ? setup_fault_attr+0x200/0x200 [ 822.665316] __alloc_pages_nodemask+0x239/0x2890 [ 822.670087] ? do_raw_spin_unlock+0x171/0x230 [ 822.674634] ? _raw_spin_unlock+0x29/0x40 [ 822.678808] ? page_vma_mapped_walk+0x245/0x25a0 [ 822.683585] ? debug_check_no_obj_freed+0x201/0x490 [ 822.688616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 822.693482] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 822.698073] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 822.703180] ? debug_check_no_obj_freed+0x201/0x490 [ 822.708238] alloc_pages_vma+0xf2/0x780 [ 822.708851] FAULT_INJECTION: forcing a failure. [ 822.708851] name failslab, interval 1, probability 0, space 0, times 0 [ 822.712229] new_page+0x345/0x420 [ 822.712248] migrate_pages+0x528/0x2fe0 [ 822.712265] ? alloc_pages_vma+0x780/0x780 [ 822.712300] ? migrate_huge_page_move_mapping+0x810/0x810 [ 822.740631] ? __mpol_equal.part.0+0x310/0x310 [ 822.745208] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 822.750591] ? vmacache_find+0x62/0x310 [ 822.754564] do_mbind+0xaaf/0xd60 [ 822.758028] ? __mpol_dup+0x4a0/0x4a0 [ 822.761830] ? wait_for_completion_io+0x10/0x10 [ 822.766661] ? get_nodes+0x218/0x290 [ 822.770363] __x64_sys_mbind+0x235/0x290 [ 822.774732] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 822.779046] ? trace_hardirqs_off_caller+0x6e/0x210 [ 822.784057] ? do_syscall_64+0x21/0x620 [ 822.788025] do_syscall_64+0xf9/0x620 [ 822.791823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.797002] RIP: 0033:0x4665d9 16:53:24 executing program 2 (fault-call:1 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 822.800182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.819073] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 822.826778] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 822.834037] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 822.841290] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 822.848579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.855857] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 [ 822.863148] CPU: 0 PID: 23883 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 822.871043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.880579] Call Trace: [ 822.883187] dump_stack+0x1fc/0x2ef [ 822.886829] should_fail.cold+0xa/0xf [ 822.890727] ? sk_filter_trim_cap+0x497/0x7d0 [ 822.895243] ? setup_fault_attr+0x200/0x200 [ 822.899571] ? lock_downgrade+0x720/0x720 [ 822.903738] __should_failslab+0x115/0x180 [ 822.907977] should_failslab+0x5/0x10 16:53:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000a0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 822.911783] kmem_cache_alloc+0x3f/0x370 [ 822.915853] skb_clone+0x151/0x3d0 [ 822.919397] netlink_deliver_tap+0x955/0xb00 [ 822.923839] netlink_dump+0xa4f/0xc10 [ 822.927649] __netlink_dump_start+0x4e9/0x6f0 [ 822.932153] rtnetlink_rcv_msg+0x71e/0xb80 [ 822.936393] ? rtnl_fill_ifinfo+0x36d0/0x36d0 [ 822.940888] ? rtnl_calcit.isra.0+0x430/0x430 [ 822.945386] ? rtnl_fill_ifinfo+0x36d0/0x36d0 [ 822.949865] ? kfree_skbmem+0x140/0x140 [ 822.953838] netlink_rcv_skb+0x160/0x440 [ 822.957882] ? rtnl_calcit.isra.0+0x430/0x430 [ 822.962359] ? netlink_ack+0xae0/0xae0 [ 822.966333] netlink_unicast+0x4d5/0x690 [ 822.970384] ? netlink_sendskb+0x110/0x110 [ 822.974604] ? _copy_from_iter_full+0x229/0x7c0 [ 822.979260] ? __phys_addr_symbol+0x2c/0x70 [ 822.983593] ? __check_object_size+0x17b/0x3e0 [ 822.988169] netlink_sendmsg+0x6bb/0xc40 [ 822.992216] ? aa_af_perm+0x230/0x230 [ 822.995998] ? nlmsg_notify+0x1a0/0x1a0 [ 823.000148] ? kernel_recvmsg+0x220/0x220 [ 823.004295] ? nlmsg_notify+0x1a0/0x1a0 [ 823.008257] sock_sendmsg+0xc3/0x120 [ 823.011963] ___sys_sendmsg+0x7bb/0x8e0 [ 823.015920] ? check_preemption_disabled+0x41/0x280 [ 823.020918] ? copy_msghdr_from_user+0x440/0x440 [ 823.025663] ? __fget+0x32f/0x510 [ 823.029115] ? lock_downgrade+0x720/0x720 [ 823.033260] ? check_preemption_disabled+0x41/0x280 [ 823.038272] ? check_preemption_disabled+0x41/0x280 [ 823.043274] ? __fget+0x356/0x510 [ 823.046711] ? do_dup2+0x450/0x450 [ 823.050239] ? lock_downgrade+0x720/0x720 [ 823.054372] ? vfs_write+0x3d7/0x540 [ 823.058072] ? __fdget+0x1d0/0x230 [ 823.061602] __x64_sys_sendmsg+0x132/0x220 [ 823.065816] ? __sys_sendmsg+0x1b0/0x1b0 [ 823.069856] ? vfs_write+0x393/0x540 [ 823.073552] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 823.078898] ? trace_hardirqs_off_caller+0x6e/0x210 [ 823.083906] ? do_syscall_64+0x21/0x620 [ 823.087878] do_syscall_64+0xf9/0x620 [ 823.091681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.096854] RIP: 0033:0x4665d9 16:53:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) [ 823.100039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.118932] RSP: 002b:00007f2fccbd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.126754] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 823.134034] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 823.141287] RBP: 00007f2fccbd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 823.148546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.155813] R13: 00007ffc41e505af R14: 00007f2fccbd1300 R15: 0000000000022000 16:53:25 executing program 2 (fault-call:1 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 823.228060] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 823.248504] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:25 executing program 3 (fault-call:2 fault-nth:2): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000b0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:25 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb9030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 16:53:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 823.517433] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 823.545674] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 16:53:25 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xba030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 823.683797] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000d0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 823.725454] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 824.121338] FAULT_INJECTION: forcing a failure. [ 824.121338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.133318] CPU: 1 PID: 23922 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 824.141189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.150582] Call Trace: [ 824.153160] dump_stack+0x1fc/0x2ef [ 824.156815] should_fail.cold+0xa/0xf [ 824.160650] ? lock_acquire+0x170/0x3c0 [ 824.164611] ? setup_fault_attr+0x200/0x200 [ 824.168923] __alloc_pages_nodemask+0x239/0x2890 [ 824.173878] ? free_one_page+0x12b/0x1080 [ 824.178031] ? lock_downgrade+0x720/0x720 [ 824.182218] ? free_one_page+0x12b/0x1080 [ 824.188202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 824.193040] ? trace_hardirqs_off+0x64/0x200 [ 824.197571] ? __free_pages_ok+0x41a/0xd30 [ 824.201816] ? lock_downgrade+0x720/0x720 [ 824.205965] ? mark_held_locks+0xa6/0xf0 [ 824.210012] ? __free_pages_ok+0x54d/0xd30 [ 824.214233] alloc_pages_vma+0xf2/0x780 [ 824.218208] new_page+0x345/0x420 [ 824.221683] migrate_pages+0x528/0x2fe0 [ 824.225640] ? alloc_pages_vma+0x780/0x780 [ 824.229861] ? migrate_huge_page_move_mapping+0x810/0x810 [ 824.235381] ? __mpol_equal.part.0+0x310/0x310 [ 824.239962] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 824.245397] ? vmacache_find+0x62/0x310 [ 824.249357] do_mbind+0xaaf/0xd60 [ 824.252809] ? __mpol_dup+0x4a0/0x4a0 [ 824.256604] ? wait_for_completion_io+0x10/0x10 [ 824.261264] ? get_nodes+0x218/0x290 [ 824.265501] __x64_sys_mbind+0x235/0x290 [ 824.269590] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 824.273907] ? trace_hardirqs_off_caller+0x6e/0x210 [ 824.278910] ? do_syscall_64+0x21/0x620 [ 824.282883] do_syscall_64+0xf9/0x620 [ 824.286669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 824.291842] RIP: 0033:0x4665d9 [ 824.295016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 824.314011] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 824.321700] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 824.328963] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 824.336235] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 824.343510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.351028] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:26 executing program 3 (fault-call:2 fault-nth:3): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 16:53:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000e0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:26 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbb030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 824.608148] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000f0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:26 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbc030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 824.651043] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 16:53:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000110001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 825.142897] FAULT_INJECTION: forcing a failure. [ 825.142897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 825.155024] CPU: 0 PID: 23977 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 825.162902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.172290] Call Trace: [ 825.174871] dump_stack+0x1fc/0x2ef [ 825.178501] should_fail.cold+0xa/0xf [ 825.182299] ? lock_acquire+0x170/0x3c0 [ 825.186286] ? setup_fault_attr+0x200/0x200 [ 825.190610] __alloc_pages_nodemask+0x239/0x2890 [ 825.195355] ? do_raw_spin_unlock+0x171/0x230 [ 825.199849] ? _raw_spin_unlock+0x29/0x40 [ 825.204023] ? page_vma_mapped_walk+0x245/0x25a0 [ 825.208779] ? debug_check_no_obj_freed+0x201/0x490 [ 825.213782] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 825.218722] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 825.223300] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 825.228485] ? debug_check_no_obj_freed+0x201/0x490 [ 825.233499] alloc_pages_vma+0xf2/0x780 [ 825.237471] new_page+0x345/0x420 [ 825.241006] migrate_pages+0x528/0x2fe0 [ 825.244964] ? alloc_pages_vma+0x780/0x780 [ 825.249247] ? migrate_huge_page_move_mapping+0x810/0x810 [ 825.255134] ? __mpol_equal.part.0+0x310/0x310 [ 825.259709] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 825.265088] ? vmacache_find+0x62/0x310 [ 825.269059] do_mbind+0xaaf/0xd60 [ 825.272746] ? __mpol_dup+0x4a0/0x4a0 [ 825.276541] ? wait_for_completion_io+0x10/0x10 [ 825.281203] ? get_nodes+0x218/0x290 [ 825.284902] __x64_sys_mbind+0x235/0x290 [ 825.288966] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 825.293299] ? trace_hardirqs_off_caller+0x6e/0x210 [ 825.298400] ? do_syscall_64+0x21/0x620 [ 825.302367] do_syscall_64+0xf9/0x620 [ 825.307349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 825.312544] RIP: 0033:0x4665d9 [ 825.316004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 825.334995] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 825.342694] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 825.349959] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 825.357332] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 825.364596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.371881] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:27 executing program 3 (fault-call:2 fault-nth:4): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:27 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbd030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 16:53:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000140001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 16:53:27 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbe030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000002f0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 826.083160] FAULT_INJECTION: forcing a failure. [ 826.083160] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 826.095168] CPU: 0 PID: 24017 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 826.103044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.112494] Call Trace: [ 826.115076] dump_stack+0x1fc/0x2ef [ 826.118720] should_fail.cold+0xa/0xf [ 826.122515] ? lock_acquire+0x170/0x3c0 [ 826.126497] ? setup_fault_attr+0x200/0x200 [ 826.132050] __alloc_pages_nodemask+0x239/0x2890 [ 826.136885] ? do_raw_spin_unlock+0x171/0x230 [ 826.141379] ? _raw_spin_unlock+0x29/0x40 [ 826.145526] ? page_vma_mapped_walk+0x245/0x25a0 [ 826.150286] ? debug_check_no_obj_freed+0x201/0x490 [ 826.155307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 826.160142] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 826.164711] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 826.169803] ? debug_check_no_obj_freed+0x201/0x490 [ 826.174827] alloc_pages_vma+0xf2/0x780 [ 826.178795] new_page+0x345/0x420 [ 826.182339] migrate_pages+0x528/0x2fe0 [ 826.186306] ? alloc_pages_vma+0x780/0x780 [ 826.190533] ? migrate_huge_page_move_mapping+0x810/0x810 [ 826.196063] ? __mpol_equal.part.0+0x310/0x310 [ 826.200642] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 826.205990] ? vmacache_find+0x62/0x310 [ 826.210027] do_mbind+0xaaf/0xd60 [ 826.213481] ? __mpol_dup+0x4a0/0x4a0 [ 826.217280] ? wait_for_completion_io+0x10/0x10 [ 826.221964] ? get_nodes+0x218/0x290 [ 826.225666] __x64_sys_mbind+0x235/0x290 [ 826.229757] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 826.234091] ? trace_hardirqs_off_caller+0x6e/0x210 [ 826.239107] ? do_syscall_64+0x21/0x620 [ 826.243084] do_syscall_64+0xf9/0x620 [ 826.246906] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 826.252238] RIP: 0033:0x4665d9 [ 826.255416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.274315] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 826.282014] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 826.289402] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 826.297625] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 826.304891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.312166] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:28 executing program 3 (fault-call:2 fault-nth:5): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:28 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbf030000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000670001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16:53:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000700001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 826.504763] validate_nla: 8 callbacks suppressed [ 826.504772] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 826.525208] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 16:53:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000003001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:28 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xc0ed0000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 826.723675] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 826.793070] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 826.811669] erofs: read_super, device -> /dev/loop5 [ 826.817963] erofs: options -> fault_injection=0x0000000000000000,fowner>00000000000000000000, [ 826.840526] erofs: cannot find valid erofs superblock [ 827.060434] FAULT_INJECTION: forcing a failure. [ 827.060434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 827.072288] CPU: 0 PID: 24069 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 827.080152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.089488] Call Trace: [ 827.092065] dump_stack+0x1fc/0x2ef [ 827.095676] should_fail.cold+0xa/0xf [ 827.099476] ? lock_acquire+0x170/0x3c0 [ 827.103452] ? setup_fault_attr+0x200/0x200 [ 827.107781] __alloc_pages_nodemask+0x239/0x2890 [ 827.112536] ? do_raw_spin_unlock+0x171/0x230 [ 827.117051] ? _raw_spin_unlock+0x29/0x40 [ 827.121397] ? page_vma_mapped_walk+0x245/0x25a0 [ 827.126162] ? debug_check_no_obj_freed+0x201/0x490 [ 827.131201] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 827.136040] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 827.140609] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 827.145755] ? debug_check_no_obj_freed+0x201/0x490 [ 827.150764] alloc_pages_vma+0xf2/0x780 [ 827.154721] new_page+0x345/0x420 [ 827.158155] migrate_pages+0x528/0x2fe0 [ 827.162111] ? alloc_pages_vma+0x780/0x780 [ 827.166442] ? migrate_huge_page_move_mapping+0x810/0x810 [ 827.171969] ? __mpol_equal.part.0+0x310/0x310 [ 827.176544] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 827.181891] ? vmacache_find+0x62/0x310 [ 827.185860] do_mbind+0xaaf/0xd60 [ 827.189430] ? __mpol_dup+0x4a0/0x4a0 [ 827.193233] ? wait_for_completion_io+0x10/0x10 [ 827.197897] ? get_nodes+0x218/0x290 [ 827.201615] __x64_sys_mbind+0x235/0x290 [ 827.205673] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 827.210004] ? trace_hardirqs_off_caller+0x6e/0x210 [ 827.215061] ? do_syscall_64+0x21/0x620 [ 827.219022] do_syscall_64+0xf9/0x620 [ 827.222807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.227989] RIP: 0033:0x4665d9 [ 827.231172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.250057] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 827.257748] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 827.264997] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 827.272260] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 827.279513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.286772] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:29 executing program 3 (fault-call:2 fault-nth:6): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 16:53:29 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xe0f5e1e2, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 827.559435] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 827.619691] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103000d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 16:53:29 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xe2e1f5e0, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 827.811255] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 827.880748] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 828.035142] FAULT_INJECTION: forcing a failure. [ 828.035142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 828.047132] CPU: 1 PID: 24114 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 828.055001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.064339] Call Trace: [ 828.066937] dump_stack+0x1fc/0x2ef [ 828.070581] should_fail.cold+0xa/0xf [ 828.074408] ? lock_acquire+0x170/0x3c0 [ 828.078394] ? setup_fault_attr+0x200/0x200 [ 828.082722] __alloc_pages_nodemask+0x239/0x2890 [ 828.087495] ? do_raw_spin_unlock+0x171/0x230 [ 828.091997] ? _raw_spin_unlock+0x29/0x40 [ 828.096147] ? page_vma_mapped_walk+0x245/0x25a0 [ 828.100904] ? debug_check_no_obj_freed+0x201/0x490 [ 828.105944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 828.110787] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 828.115366] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 828.120477] ? debug_check_no_obj_freed+0x201/0x490 [ 828.125481] alloc_pages_vma+0xf2/0x780 [ 828.131004] new_page+0x345/0x420 [ 828.134441] migrate_pages+0x528/0x2fe0 [ 828.138414] ? alloc_pages_vma+0x780/0x780 [ 828.142645] ? migrate_huge_page_move_mapping+0x810/0x810 [ 828.148184] ? __mpol_equal.part.0+0x310/0x310 [ 828.152750] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 828.158110] ? vmacache_find+0x62/0x310 [ 828.162085] do_mbind+0xaaf/0xd60 [ 828.165524] ? __mpol_dup+0x4a0/0x4a0 [ 828.169321] ? wait_for_completion_io+0x10/0x10 [ 828.173980] ? get_nodes+0x218/0x290 [ 828.177699] __x64_sys_mbind+0x235/0x290 [ 828.181754] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 828.186068] ? trace_hardirqs_off_caller+0x6e/0x210 [ 828.191064] ? do_syscall_64+0x21/0x620 [ 828.195035] do_syscall_64+0xf9/0x620 [ 828.198825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.204025] RIP: 0033:0x4665d9 [ 828.207212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 828.226191] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 828.233994] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 828.241255] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 828.248518] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 828.255884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.263161] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:30 executing program 3 (fault-call:2 fault-nth:7): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:30 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xea260000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 16:53:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 828.472248] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x286, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:30 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xf6ffffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 828.518590] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 16:53:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 828.995616] FAULT_INJECTION: forcing a failure. [ 828.995616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 829.007668] CPU: 1 PID: 24174 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 829.015665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.025043] Call Trace: [ 829.027717] dump_stack+0x1fc/0x2ef [ 829.031345] should_fail.cold+0xa/0xf [ 829.035156] ? lock_acquire+0x170/0x3c0 [ 829.039114] ? setup_fault_attr+0x200/0x200 [ 829.043431] __alloc_pages_nodemask+0x239/0x2890 [ 829.048183] ? do_raw_spin_unlock+0x171/0x230 [ 829.052679] ? _raw_spin_unlock+0x29/0x40 [ 829.056814] ? page_vma_mapped_walk+0x245/0x25a0 [ 829.061556] ? debug_check_no_obj_freed+0x201/0x490 [ 829.066554] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 829.071390] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 829.076131] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 829.081242] ? debug_check_no_obj_freed+0x201/0x490 [ 829.086261] alloc_pages_vma+0xf2/0x780 [ 829.090231] new_page+0x345/0x420 [ 829.093682] migrate_pages+0x528/0x2fe0 [ 829.097659] ? alloc_pages_vma+0x780/0x780 [ 829.101891] ? migrate_huge_page_move_mapping+0x810/0x810 [ 829.107471] ? __mpol_equal.part.0+0x310/0x310 [ 829.112058] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 829.117422] ? vmacache_find+0x62/0x310 [ 829.121539] do_mbind+0xaaf/0xd60 [ 829.124981] ? __mpol_dup+0x4a0/0x4a0 [ 829.128779] ? wait_for_completion_io+0x10/0x10 [ 829.133440] ? get_nodes+0x218/0x290 [ 829.137149] __x64_sys_mbind+0x235/0x290 [ 829.141199] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 829.145504] ? trace_hardirqs_off_caller+0x6e/0x210 [ 829.150502] ? do_syscall_64+0x21/0x620 [ 829.154478] do_syscall_64+0xf9/0x620 [ 829.158262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 829.163461] RIP: 0033:0x4665d9 [ 829.166644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.185530] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 829.193310] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 829.200560] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 829.207811] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 829.215078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.222351] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:31 executing program 3 (fault-call:2 fault-nth:8): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:31 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfbffffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16:53:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:31 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfcfdffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 16:53:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) [ 829.916699] FAULT_INJECTION: forcing a failure. [ 829.916699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 829.929045] CPU: 1 PID: 24218 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 829.937117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.946460] Call Trace: [ 829.949061] dump_stack+0x1fc/0x2ef [ 829.952694] should_fail.cold+0xa/0xf [ 829.956500] ? lock_acquire+0x170/0x3c0 [ 829.960469] ? setup_fault_attr+0x200/0x200 [ 829.964781] __alloc_pages_nodemask+0x239/0x2890 [ 829.969530] ? do_raw_spin_unlock+0x171/0x230 [ 829.974015] ? _raw_spin_unlock+0x29/0x40 [ 829.978161] ? page_vma_mapped_walk+0x245/0x25a0 [ 829.982906] ? debug_check_no_obj_freed+0x201/0x490 [ 829.987918] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 829.992755] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 829.997339] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 830.002424] ? debug_check_no_obj_freed+0x201/0x490 [ 830.007440] alloc_pages_vma+0xf2/0x780 [ 830.011410] new_page+0x345/0x420 [ 830.014887] migrate_pages+0x528/0x2fe0 [ 830.019761] ? alloc_pages_vma+0x780/0x780 [ 830.023983] ? migrate_huge_page_move_mapping+0x810/0x810 [ 830.029513] ? __mpol_equal.part.0+0x310/0x310 [ 830.034089] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 830.039438] ? vmacache_find+0x62/0x310 [ 830.043403] do_mbind+0xaaf/0xd60 [ 830.046958] ? __mpol_dup+0x4a0/0x4a0 [ 830.050806] ? wait_for_completion_io+0x10/0x10 [ 830.055467] ? get_nodes+0x218/0x290 [ 830.059170] __x64_sys_mbind+0x235/0x290 [ 830.063326] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 830.067645] ? trace_hardirqs_off_caller+0x6e/0x210 [ 830.072656] ? do_syscall_64+0x21/0x620 [ 830.076721] do_syscall_64+0xf9/0x620 [ 830.080523] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 830.085698] RIP: 0033:0x4665d9 [ 830.089067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.107975] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 830.115686] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 830.122964] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 830.130220] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 830.137506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.144764] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:32 executing program 3 (fault-call:2 fault-nth:9): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:32 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfdfdffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4f0e0000}, 0x0) 16:53:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 16:53:32 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xff0f0000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xec0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 830.840346] FAULT_INJECTION: forcing a failure. [ 830.840346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 830.852485] CPU: 1 PID: 24264 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 830.860446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.869796] Call Trace: [ 830.872373] dump_stack+0x1fc/0x2ef [ 830.876088] should_fail.cold+0xa/0xf [ 830.879886] ? lock_acquire+0x170/0x3c0 [ 830.883859] ? setup_fault_attr+0x200/0x200 [ 830.888208] __alloc_pages_nodemask+0x239/0x2890 [ 830.892962] ? do_raw_spin_unlock+0x171/0x230 [ 830.897456] ? _raw_spin_unlock+0x29/0x40 [ 830.901617] ? page_vma_mapped_walk+0x245/0x25a0 [ 830.906385] ? debug_check_no_obj_freed+0x201/0x490 [ 830.911401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 830.916255] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 830.920835] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 830.925937] ? debug_check_no_obj_freed+0x201/0x490 [ 830.930955] alloc_pages_vma+0xf2/0x780 [ 830.934916] new_page+0x345/0x420 [ 830.938368] migrate_pages+0x528/0x2fe0 [ 830.942338] ? alloc_pages_vma+0x780/0x780 [ 830.946664] ? migrate_huge_page_move_mapping+0x810/0x810 [ 830.952187] ? __mpol_equal.part.0+0x310/0x310 [ 830.956768] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 830.962125] ? vmacache_find+0x62/0x310 [ 830.966188] do_mbind+0xaaf/0xd60 [ 830.969909] ? __mpol_dup+0x4a0/0x4a0 [ 830.973700] ? wait_for_completion_io+0x10/0x10 [ 830.978480] ? get_nodes+0x218/0x290 [ 830.982224] __x64_sys_mbind+0x235/0x290 [ 830.986282] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 830.990604] ? trace_hardirqs_off_caller+0x6e/0x210 [ 830.995616] ? do_syscall_64+0x21/0x620 [ 830.999591] do_syscall_64+0xf9/0x620 [ 831.003407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 831.008591] RIP: 0033:0x4665d9 [ 831.011781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 831.030676] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 831.038387] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 831.045666] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 831.052985] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 831.060246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 831.067518] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:33 executing program 3 (fault-call:2 fault-nth:10): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 16:53:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103a00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:33 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffff0300, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103b00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 16:53:33 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffff1f00, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103c00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) [ 831.574660] validate_nla: 16 callbacks suppressed [ 831.574667] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 831.599505] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 831.797478] FAULT_INJECTION: forcing a failure. [ 831.797478] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 831.809386] CPU: 0 PID: 24315 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 831.817253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.826711] Call Trace: [ 831.829286] dump_stack+0x1fc/0x2ef [ 831.832984] should_fail.cold+0xa/0xf [ 831.836853] ? lock_acquire+0x170/0x3c0 [ 831.840809] ? setup_fault_attr+0x200/0x200 [ 831.845118] __alloc_pages_nodemask+0x239/0x2890 [ 831.849856] ? do_raw_spin_unlock+0x171/0x230 [ 831.854338] ? _raw_spin_unlock+0x29/0x40 [ 831.858470] ? page_vma_mapped_walk+0x245/0x25a0 [ 831.863219] ? debug_check_no_obj_freed+0x201/0x490 [ 831.868226] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 831.873058] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 831.877718] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 831.882830] ? debug_check_no_obj_freed+0x201/0x490 [ 831.887841] alloc_pages_vma+0xf2/0x780 [ 831.891821] new_page+0x345/0x420 [ 831.895265] migrate_pages+0x528/0x2fe0 [ 831.899268] ? alloc_pages_vma+0x780/0x780 [ 831.903537] ? migrate_huge_page_move_mapping+0x810/0x810 [ 831.909060] ? __mpol_equal.part.0+0x310/0x310 [ 831.913625] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 831.919070] ? vmacache_find+0x62/0x310 [ 831.923031] do_mbind+0xaaf/0xd60 [ 831.926483] ? __mpol_dup+0x4a0/0x4a0 [ 831.930285] ? wait_for_completion_io+0x10/0x10 [ 831.934980] ? get_nodes+0x218/0x290 [ 831.938680] __x64_sys_mbind+0x235/0x290 [ 831.942725] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 831.947029] ? trace_hardirqs_off_caller+0x6e/0x210 [ 831.952029] ? do_syscall_64+0x21/0x620 [ 831.955986] do_syscall_64+0xf9/0x620 [ 831.959813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 831.964990] RIP: 0033:0x4665d9 [ 831.968176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 831.987078] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 831.994765] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 832.002026] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 832.009291] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 832.016618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.023897] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:34 executing program 3 (fault-call:2 fault-nth:11): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103d00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 16:53:34 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfffffdfc, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6558, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000103e00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 832.177414] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 832.209222] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 16:53:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:34 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfffffdfd, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 832.361090] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 832.389212] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 832.740484] FAULT_INJECTION: forcing a failure. [ 832.740484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 832.752368] CPU: 1 PID: 24364 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 832.760329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.769803] Call Trace: [ 832.772384] dump_stack+0x1fc/0x2ef [ 832.776168] should_fail.cold+0xa/0xf [ 832.780108] ? lock_acquire+0x170/0x3c0 [ 832.784131] ? setup_fault_attr+0x200/0x200 [ 832.788445] __alloc_pages_nodemask+0x239/0x2890 [ 832.793188] ? do_raw_spin_unlock+0x171/0x230 [ 832.797678] ? _raw_spin_unlock+0x29/0x40 [ 832.801822] ? page_vma_mapped_walk+0x245/0x25a0 [ 832.806817] ? debug_check_no_obj_freed+0x201/0x490 [ 832.811819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 832.816668] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 832.821246] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 832.826334] ? debug_check_no_obj_freed+0x201/0x490 [ 832.831337] alloc_pages_vma+0xf2/0x780 [ 832.835299] new_page+0x345/0x420 [ 832.838751] migrate_pages+0x528/0x2fe0 [ 832.842722] ? alloc_pages_vma+0x780/0x780 [ 832.846945] ? migrate_huge_page_move_mapping+0x810/0x810 [ 832.852464] ? __mpol_equal.part.0+0x310/0x310 [ 832.857042] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 832.863356] ? vmacache_find+0x62/0x310 [ 832.867319] do_mbind+0xaaf/0xd60 [ 832.870770] ? __mpol_dup+0x4a0/0x4a0 [ 832.875094] ? wait_for_completion_io+0x10/0x10 [ 832.879758] ? get_nodes+0x218/0x290 [ 832.883465] __x64_sys_mbind+0x235/0x290 [ 832.887510] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 832.891822] ? trace_hardirqs_off_caller+0x6e/0x210 [ 832.896847] ? do_syscall_64+0x21/0x620 [ 832.900826] do_syscall_64+0xf9/0x620 [ 832.904609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 832.909778] RIP: 0033:0x4665d9 [ 832.912952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.931833] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 832.939532] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 832.946802] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 832.954066] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 832.961372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.968630] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:34 executing program 3 (fault-call:2 fault-nth:12): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104100d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8602, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 16:53:34 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffffff7f, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 833.117995] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 833.177714] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:35 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffffff8c, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 16:53:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 833.429665] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 833.477596] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 833.674277] FAULT_INJECTION: forcing a failure. [ 833.674277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 833.686347] CPU: 0 PID: 24417 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 833.694349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.703788] Call Trace: [ 833.706366] dump_stack+0x1fc/0x2ef [ 833.710069] should_fail.cold+0xa/0xf [ 833.713904] ? lock_acquire+0x170/0x3c0 [ 833.717870] ? setup_fault_attr+0x200/0x200 [ 833.722183] __alloc_pages_nodemask+0x239/0x2890 [ 833.727183] ? do_raw_spin_unlock+0x171/0x230 [ 833.732106] ? _raw_spin_unlock+0x29/0x40 [ 833.736243] ? page_vma_mapped_walk+0x245/0x25a0 [ 833.740991] ? debug_check_no_obj_freed+0x201/0x490 [ 833.746031] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 833.750888] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 833.755667] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 833.760772] ? debug_check_no_obj_freed+0x201/0x490 [ 833.765812] alloc_pages_vma+0xf2/0x780 [ 833.769785] new_page+0x345/0x420 [ 833.773222] migrate_pages+0x528/0x2fe0 [ 833.777266] ? alloc_pages_vma+0x780/0x780 [ 833.781513] ? migrate_huge_page_move_mapping+0x810/0x810 [ 833.787057] ? __mpol_equal.part.0+0x310/0x310 [ 833.791632] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 833.797000] ? vmacache_find+0x62/0x310 [ 833.801060] do_mbind+0xaaf/0xd60 [ 833.804501] ? __mpol_dup+0x4a0/0x4a0 [ 833.808287] ? wait_for_completion_io+0x10/0x10 [ 833.812948] ? get_nodes+0x218/0x290 [ 833.816648] __x64_sys_mbind+0x235/0x290 [ 833.820714] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 833.825050] ? trace_hardirqs_off_caller+0x6e/0x210 [ 833.830058] ? do_syscall_64+0x21/0x620 [ 833.834035] do_syscall_64+0xf9/0x620 [ 833.837822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.843011] RIP: 0033:0x4665d9 [ 833.846187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 833.865447] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 833.873151] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 833.880501] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 833.887754] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 833.895177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.902443] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:35 executing program 3 (fault-call:2 fault-nth:13): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:35 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfffffff6, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 16:53:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 16:53:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff00, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:36 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfffffffb, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 834.611045] FAULT_INJECTION: forcing a failure. [ 834.611045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 834.623060] CPU: 1 PID: 24461 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 834.630939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.640277] Call Trace: [ 834.643048] dump_stack+0x1fc/0x2ef [ 834.646661] should_fail.cold+0xa/0xf [ 834.650445] ? lock_acquire+0x170/0x3c0 [ 834.654404] ? setup_fault_attr+0x200/0x200 [ 834.658726] __alloc_pages_nodemask+0x239/0x2890 [ 834.663473] ? do_raw_spin_unlock+0x171/0x230 [ 834.667957] ? _raw_spin_unlock+0x29/0x40 [ 834.672091] ? page_vma_mapped_walk+0x245/0x25a0 [ 834.676934] ? debug_check_no_obj_freed+0x201/0x490 [ 834.681960] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 834.686796] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 834.691374] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 834.696466] ? debug_check_no_obj_freed+0x201/0x490 [ 834.701486] alloc_pages_vma+0xf2/0x780 [ 834.705560] new_page+0x345/0x420 [ 834.708995] migrate_pages+0x528/0x2fe0 [ 834.712952] ? alloc_pages_vma+0x780/0x780 [ 834.717189] ? migrate_huge_page_move_mapping+0x810/0x810 [ 834.722720] ? __mpol_equal.part.0+0x310/0x310 [ 834.727292] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 834.732652] ? vmacache_find+0x62/0x310 [ 834.736610] do_mbind+0xaaf/0xd60 [ 834.740078] ? __mpol_dup+0x4a0/0x4a0 [ 834.743873] ? wait_for_completion_io+0x10/0x10 [ 834.748524] ? get_nodes+0x218/0x290 [ 834.752224] __x64_sys_mbind+0x235/0x290 [ 834.756287] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 834.760781] ? trace_hardirqs_off_caller+0x6e/0x210 [ 834.765786] ? do_syscall_64+0x21/0x620 [ 834.770092] do_syscall_64+0xf9/0x620 [ 834.773882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 834.779067] RIP: 0033:0x4665d9 [ 834.782250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.801130] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 834.808914] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 834.816175] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 834.823425] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 834.830675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.837955] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:36 executing program 3 (fault-call:2 fault-nth:14): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 16:53:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:36 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xedc000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 16:53:37 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x4000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 835.467580] FAULT_INJECTION: forcing a failure. [ 835.467580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 835.479563] CPU: 1 PID: 24512 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 835.487439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.496791] Call Trace: [ 835.499368] dump_stack+0x1fc/0x2ef [ 835.502984] should_fail.cold+0xa/0xf [ 835.506771] ? lock_acquire+0x170/0x3c0 [ 835.510728] ? setup_fault_attr+0x200/0x200 [ 835.515057] __alloc_pages_nodemask+0x239/0x2890 [ 835.520001] ? do_raw_spin_unlock+0x171/0x230 [ 835.524523] ? _raw_spin_unlock+0x29/0x40 [ 835.528656] ? page_vma_mapped_walk+0x245/0x25a0 [ 835.533402] ? debug_check_no_obj_freed+0x201/0x490 [ 835.538418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 835.543253] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 835.547837] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 835.552951] ? debug_check_no_obj_freed+0x201/0x490 [ 835.557955] alloc_pages_vma+0xf2/0x780 [ 835.561920] new_page+0x345/0x420 [ 835.565359] migrate_pages+0x528/0x2fe0 [ 835.569318] ? alloc_pages_vma+0x780/0x780 [ 835.573629] ? migrate_huge_page_move_mapping+0x810/0x810 [ 835.579150] ? __mpol_equal.part.0+0x310/0x310 [ 835.583719] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 835.589081] ? vmacache_find+0x62/0x310 [ 835.593043] do_mbind+0xaaf/0xd60 [ 835.596511] ? __mpol_dup+0x4a0/0x4a0 [ 835.600296] ? wait_for_completion_io+0x10/0x10 [ 835.604954] ? get_nodes+0x218/0x290 [ 835.608676] __x64_sys_mbind+0x235/0x290 [ 835.612737] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 835.617062] ? trace_hardirqs_off_caller+0x6e/0x210 [ 835.622076] ? do_syscall_64+0x21/0x620 [ 835.626036] do_syscall_64+0xf9/0x620 [ 835.629821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 835.634996] RIP: 0033:0x4665d9 [ 835.638183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 835.657084] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 835.664775] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 835.672048] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 835.679303] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 835.686568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.693822] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:37 executing program 3 (fault-call:2 fault-nth:15): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104a00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 16:53:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:37 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x7ffffffffffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x2) 16:53:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104b00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x3) 16:53:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:37 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x81000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 836.402310] FAULT_INJECTION: forcing a failure. [ 836.402310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 836.414279] CPU: 0 PID: 24559 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 836.422147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.431488] Call Trace: [ 836.434066] dump_stack+0x1fc/0x2ef [ 836.437695] should_fail.cold+0xa/0xf [ 836.441497] ? lock_acquire+0x170/0x3c0 [ 836.445457] ? setup_fault_attr+0x200/0x200 [ 836.449770] __alloc_pages_nodemask+0x239/0x2890 [ 836.454509] ? do_raw_spin_unlock+0x171/0x230 [ 836.459002] ? _raw_spin_unlock+0x29/0x40 [ 836.463595] ? page_vma_mapped_walk+0x245/0x25a0 [ 836.468341] ? debug_check_no_obj_freed+0x201/0x490 [ 836.473342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 836.478188] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 836.482763] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 836.487848] ? debug_check_no_obj_freed+0x201/0x490 [ 836.492853] alloc_pages_vma+0xf2/0x780 [ 836.496869] new_page+0x345/0x420 [ 836.500319] migrate_pages+0x528/0x2fe0 [ 836.504291] ? alloc_pages_vma+0x780/0x780 [ 836.508533] ? migrate_huge_page_move_mapping+0x810/0x810 [ 836.514054] ? __mpol_equal.part.0+0x310/0x310 [ 836.518637] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 836.523994] ? vmacache_find+0x62/0x310 [ 836.527952] do_mbind+0xaaf/0xd60 [ 836.531490] ? __mpol_dup+0x4a0/0x4a0 [ 836.535288] ? wait_for_completion_io+0x10/0x10 [ 836.539959] ? get_nodes+0x218/0x290 [ 836.543663] __x64_sys_mbind+0x235/0x290 [ 836.547715] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 836.552041] ? trace_hardirqs_off_caller+0x6e/0x210 [ 836.557056] ? do_syscall_64+0x21/0x620 [ 836.561025] do_syscall_64+0xf9/0x620 [ 836.564813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 836.570097] RIP: 0033:0x4665d9 [ 836.573292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.592201] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 836.600160] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 836.607422] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 836.614676] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 836.621959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.629212] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:38 executing program 3 (fault-call:2 fault-nth:16): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4) 16:53:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104c00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:38 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x100000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 836.770956] validate_nla: 12 callbacks suppressed [ 836.770965] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 836.802469] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x5) 16:53:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104d00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:38 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x200000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6) [ 837.097655] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 837.152420] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 837.333060] FAULT_INJECTION: forcing a failure. [ 837.333060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 837.345104] CPU: 1 PID: 24600 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 837.353004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.362341] Call Trace: [ 837.364918] dump_stack+0x1fc/0x2ef [ 837.368594] should_fail.cold+0xa/0xf [ 837.372403] ? lock_acquire+0x170/0x3c0 [ 837.376495] ? setup_fault_attr+0x200/0x200 [ 837.380815] __alloc_pages_nodemask+0x239/0x2890 [ 837.385566] ? do_raw_spin_unlock+0x171/0x230 [ 837.390105] ? _raw_spin_unlock+0x29/0x40 [ 837.394234] ? page_vma_mapped_walk+0x245/0x25a0 [ 837.398976] ? debug_check_no_obj_freed+0x201/0x490 [ 837.403974] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 837.408911] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 837.413490] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 837.418589] ? debug_check_no_obj_freed+0x201/0x490 [ 837.423618] alloc_pages_vma+0xf2/0x780 [ 837.427593] new_page+0x345/0x420 [ 837.431048] migrate_pages+0x528/0x2fe0 [ 837.435006] ? alloc_pages_vma+0x780/0x780 [ 837.439231] ? migrate_huge_page_move_mapping+0x810/0x810 [ 837.444769] ? __mpol_equal.part.0+0x310/0x310 [ 837.449476] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 837.454826] ? vmacache_find+0x62/0x310 [ 837.458884] do_mbind+0xaaf/0xd60 [ 837.462432] ? __mpol_dup+0x4a0/0x4a0 [ 837.466246] ? wait_for_completion_io+0x10/0x10 [ 837.470903] ? get_nodes+0x218/0x290 [ 837.474605] __x64_sys_mbind+0x235/0x290 [ 837.478679] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 837.482998] ? trace_hardirqs_off_caller+0x6e/0x210 [ 837.488011] ? do_syscall_64+0x21/0x620 [ 837.491978] do_syscall_64+0xf9/0x620 [ 837.495773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 837.500949] RIP: 0033:0x4665d9 [ 837.504125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 837.523010] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 837.530721] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 837.537975] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 837.545235] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 837.552487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.559739] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:39 executing program 3 (fault-call:2 fault-nth:17): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104e00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:39 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{0x0}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:39 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x300000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7) 16:53:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104f00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x8) 16:53:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105000d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:39 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{0x0}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:39 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x400000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 837.901341] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 837.953269] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 838.271553] FAULT_INJECTION: forcing a failure. [ 838.271553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 838.283467] CPU: 1 PID: 24653 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 838.291365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.300783] Call Trace: [ 838.303355] dump_stack+0x1fc/0x2ef [ 838.306963] should_fail.cold+0xa/0xf [ 838.310745] ? lock_acquire+0x170/0x3c0 [ 838.314697] ? setup_fault_attr+0x200/0x200 [ 838.319004] __alloc_pages_nodemask+0x239/0x2890 [ 838.323740] ? do_raw_spin_unlock+0x171/0x230 [ 838.328215] ? _raw_spin_unlock+0x29/0x40 [ 838.332347] ? page_vma_mapped_walk+0x245/0x25a0 [ 838.337087] ? debug_check_no_obj_freed+0x201/0x490 [ 838.342120] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 838.346946] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 838.351512] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 838.356599] ? debug_check_no_obj_freed+0x201/0x490 [ 838.361602] alloc_pages_vma+0xf2/0x780 [ 838.365561] new_page+0x345/0x420 [ 838.369010] migrate_pages+0x528/0x2fe0 [ 838.372964] ? alloc_pages_vma+0x780/0x780 [ 838.377182] ? migrate_huge_page_move_mapping+0x810/0x810 [ 838.382707] ? __mpol_equal.part.0+0x310/0x310 [ 838.387277] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 838.392624] ? vmacache_find+0x62/0x310 [ 838.396580] do_mbind+0xaaf/0xd60 [ 838.400035] ? __mpol_dup+0x4a0/0x4a0 [ 838.403827] ? wait_for_completion_io+0x10/0x10 [ 838.408475] ? get_nodes+0x218/0x290 [ 838.412173] __x64_sys_mbind+0x235/0x290 [ 838.416219] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 838.420522] ? trace_hardirqs_off_caller+0x6e/0x210 [ 838.425519] ? do_syscall_64+0x21/0x620 [ 838.429475] do_syscall_64+0xf9/0x620 [ 838.433262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 838.438443] RIP: 0033:0x4665d9 [ 838.441617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 838.460585] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 838.468288] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 838.475556] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 838.482806] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 838.490053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 838.497309] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:40 executing program 3 (fault-call:2 fault-nth:18): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf) 16:53:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105100d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:40 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x500000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{0x0}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x48) 16:53:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000177000/0x1000)=nil) [ 838.805617] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 838.894472] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 839.122647] FAULT_INJECTION: forcing a failure. [ 839.122647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 839.134684] CPU: 1 PID: 24702 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 839.142708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.152102] Call Trace: [ 839.154684] dump_stack+0x1fc/0x2ef [ 839.158351] should_fail.cold+0xa/0xf [ 839.162138] ? lock_acquire+0x170/0x3c0 [ 839.166095] ? setup_fault_attr+0x200/0x200 [ 839.170404] __alloc_pages_nodemask+0x239/0x2890 [ 839.175227] ? do_raw_spin_unlock+0x171/0x230 [ 839.179705] ? _raw_spin_unlock+0x29/0x40 [ 839.183835] ? page_vma_mapped_walk+0x245/0x25a0 [ 839.188577] ? debug_check_no_obj_freed+0x201/0x490 [ 839.193602] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 839.198438] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 839.203090] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 839.208273] ? debug_check_no_obj_freed+0x201/0x490 [ 839.213309] alloc_pages_vma+0xf2/0x780 [ 839.217279] new_page+0x345/0x420 [ 839.220747] migrate_pages+0x528/0x2fe0 [ 839.224717] ? alloc_pages_vma+0x780/0x780 [ 839.228946] ? migrate_huge_page_move_mapping+0x810/0x810 [ 839.234550] ? __mpol_equal.part.0+0x310/0x310 [ 839.239255] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 839.244619] ? vmacache_find+0x62/0x310 [ 839.248608] do_mbind+0xaaf/0xd60 [ 839.252159] ? __mpol_dup+0x4a0/0x4a0 [ 839.255946] ? wait_for_completion_io+0x10/0x10 [ 839.260620] ? get_nodes+0x218/0x290 [ 839.264337] __x64_sys_mbind+0x235/0x290 [ 839.268383] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 839.272689] ? trace_hardirqs_off_caller+0x6e/0x210 [ 839.277695] ? do_syscall_64+0x21/0x620 [ 839.281660] do_syscall_64+0xf9/0x620 [ 839.285450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 839.290620] RIP: 0033:0x4665d9 [ 839.293904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.312816] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 839.320512] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 839.327767] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 839.335020] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 839.342363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.349631] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:41 executing program 3 (fault-call:2 fault-nth:19): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:41 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x600000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4c) 16:53:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 839.551174] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 839.600506] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x60) 16:53:41 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x700000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000177000/0x1000)=nil) [ 840.038764] FAULT_INJECTION: forcing a failure. [ 840.038764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 840.051985] CPU: 1 PID: 24743 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 840.059878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.069216] Call Trace: [ 840.071793] dump_stack+0x1fc/0x2ef [ 840.075407] should_fail.cold+0xa/0xf [ 840.079188] ? lock_acquire+0x170/0x3c0 [ 840.083156] ? setup_fault_attr+0x200/0x200 [ 840.087474] __alloc_pages_nodemask+0x239/0x2890 [ 840.092212] ? do_raw_spin_unlock+0x171/0x230 [ 840.096689] ? _raw_spin_unlock+0x29/0x40 [ 840.100845] ? page_vma_mapped_walk+0x245/0x25a0 [ 840.105603] ? debug_check_no_obj_freed+0x201/0x490 [ 840.110606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 840.115448] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 840.120044] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 840.125134] ? debug_check_no_obj_freed+0x201/0x490 [ 840.130139] alloc_pages_vma+0xf2/0x780 [ 840.134107] new_page+0x345/0x420 [ 840.137564] migrate_pages+0x528/0x2fe0 [ 840.141520] ? alloc_pages_vma+0x780/0x780 [ 840.145738] ? migrate_huge_page_move_mapping+0x810/0x810 [ 840.151271] ? __mpol_equal.part.0+0x310/0x310 [ 840.155836] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 840.161181] ? vmacache_find+0x62/0x310 [ 840.165138] do_mbind+0xaaf/0xd60 [ 840.168576] ? __mpol_dup+0x4a0/0x4a0 [ 840.172393] ? wait_for_completion_io+0x10/0x10 [ 840.177079] ? get_nodes+0x218/0x290 [ 840.180785] __x64_sys_mbind+0x235/0x290 [ 840.184847] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 840.189165] ? trace_hardirqs_off_caller+0x6e/0x210 [ 840.194183] ? do_syscall_64+0x21/0x620 [ 840.198160] do_syscall_64+0xf9/0x620 [ 840.201953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 840.207125] RIP: 0033:0x4665d9 [ 840.210299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.229285] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 840.236980] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 840.244251] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 840.251508] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 840.258757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 840.266004] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:42 executing program 3 (fault-call:2 fault-nth:20): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x68) 16:53:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:42 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x800000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6c) 16:53:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105a00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x74) 16:53:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000177000/0x1000)=nil) [ 840.921232] FAULT_INJECTION: forcing a failure. [ 840.921232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 840.934234] CPU: 0 PID: 24794 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 840.942228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.951573] Call Trace: [ 840.954153] dump_stack+0x1fc/0x2ef [ 840.957803] should_fail.cold+0xa/0xf [ 840.961594] ? lock_acquire+0x170/0x3c0 [ 840.965556] ? setup_fault_attr+0x200/0x200 [ 840.969889] __alloc_pages_nodemask+0x239/0x2890 [ 840.974636] ? do_raw_spin_unlock+0x171/0x230 [ 840.979131] ? _raw_spin_unlock+0x29/0x40 [ 840.983279] ? page_vma_mapped_walk+0x245/0x25a0 [ 840.988025] ? debug_check_no_obj_freed+0x201/0x490 [ 840.993026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 840.997870] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 841.002433] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 841.007531] ? debug_check_no_obj_freed+0x201/0x490 [ 841.012534] alloc_pages_vma+0xf2/0x780 [ 841.016492] new_page+0x345/0x420 [ 841.019927] migrate_pages+0x528/0x2fe0 [ 841.023894] ? alloc_pages_vma+0x780/0x780 [ 841.028137] ? migrate_huge_page_move_mapping+0x810/0x810 [ 841.033672] ? __mpol_equal.part.0+0x310/0x310 [ 841.038267] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 841.043631] ? vmacache_find+0x62/0x310 [ 841.047650] do_mbind+0xaaf/0xd60 [ 841.051198] ? __mpol_dup+0x4a0/0x4a0 [ 841.054988] ? wait_for_completion_io+0x10/0x10 [ 841.059644] ? get_nodes+0x218/0x290 [ 841.063404] __x64_sys_mbind+0x235/0x290 [ 841.067451] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 841.071759] ? trace_hardirqs_off_caller+0x6e/0x210 [ 841.076759] ? do_syscall_64+0x21/0x620 [ 841.080726] do_syscall_64+0xf9/0x620 [ 841.084518] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 841.089689] RIP: 0033:0x4665d9 [ 841.092875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 841.111931] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 841.119627] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 841.126885] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 841.134145] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 841.141421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 841.148675] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:43 executing program 3 (fault-call:2 fault-nth:21): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:43 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x2000000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105b00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7a) 16:53:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105c00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x86020000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf0) 16:53:43 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x3f00000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x300) 16:53:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105d00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 841.822373] FAULT_INJECTION: forcing a failure. [ 841.822373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 841.835094] CPU: 0 PID: 24842 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 841.842977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.852310] Call Trace: [ 841.854938] dump_stack+0x1fc/0x2ef [ 841.858552] should_fail.cold+0xa/0xf [ 841.862332] ? lock_acquire+0x170/0x3c0 [ 841.866286] ? setup_fault_attr+0x200/0x200 [ 841.870596] __alloc_pages_nodemask+0x239/0x2890 [ 841.875330] ? do_raw_spin_unlock+0x171/0x230 [ 841.879809] ? _raw_spin_unlock+0x29/0x40 [ 841.883951] ? page_vma_mapped_walk+0x245/0x25a0 [ 841.888691] ? debug_check_no_obj_freed+0x201/0x490 [ 841.893702] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 841.898530] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 841.903089] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 841.908172] ? debug_check_no_obj_freed+0x201/0x490 [ 841.913356] alloc_pages_vma+0xf2/0x780 [ 841.917330] new_page+0x345/0x420 [ 841.920773] migrate_pages+0x528/0x2fe0 [ 841.924725] ? alloc_pages_vma+0x780/0x780 [ 841.928948] ? migrate_huge_page_move_mapping+0x810/0x810 [ 841.934467] ? __mpol_equal.part.0+0x310/0x310 [ 841.939029] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 841.944527] ? vmacache_find+0x62/0x310 [ 841.948493] do_mbind+0xaaf/0xd60 [ 841.951944] ? __mpol_dup+0x4a0/0x4a0 [ 841.955728] ? wait_for_completion_io+0x10/0x10 [ 841.960380] ? get_nodes+0x218/0x290 [ 841.964115] __x64_sys_mbind+0x235/0x290 [ 841.968171] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 841.972477] ? trace_hardirqs_off_caller+0x6e/0x210 [ 841.977485] ? do_syscall_64+0x21/0x620 [ 841.981446] do_syscall_64+0xf9/0x620 [ 841.985236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 841.990419] RIP: 0033:0x4665d9 [ 841.993595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 842.012694] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 842.020387] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 842.027635] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 842.034895] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 842.042153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 842.049406] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:44 executing program 3 (fault-call:2 fault-nth:22): mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x500) 16:53:44 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x6000000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105e00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc00e0000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000105f00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 842.247555] validate_nla: 14 callbacks suppressed [ 842.247565] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:44 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x7fffffffffffffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 842.385639] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x600) [ 842.541636] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 842.591069] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 842.848350] FAULT_INJECTION: forcing a failure. [ 842.848350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 842.860791] CPU: 1 PID: 24890 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 842.868672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.878153] Call Trace: [ 842.880822] dump_stack+0x1fc/0x2ef [ 842.884456] should_fail.cold+0xa/0xf [ 842.888255] ? lock_acquire+0x170/0x3c0 [ 842.892222] ? setup_fault_attr+0x200/0x200 [ 842.896618] __alloc_pages_nodemask+0x239/0x2890 [ 842.901355] ? do_raw_spin_unlock+0x171/0x230 [ 842.905856] ? _raw_spin_unlock+0x29/0x40 [ 842.910014] ? page_vma_mapped_walk+0x245/0x25a0 [ 842.914761] ? debug_check_no_obj_freed+0x201/0x490 [ 842.919763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 842.924608] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 842.929219] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 842.934324] ? debug_check_no_obj_freed+0x201/0x490 [ 842.939380] alloc_pages_vma+0xf2/0x780 [ 842.943360] new_page+0x345/0x420 [ 842.946813] migrate_pages+0x528/0x2fe0 [ 842.950782] ? alloc_pages_vma+0x780/0x780 [ 842.955009] ? migrate_huge_page_move_mapping+0x810/0x810 [ 842.960529] ? __mpol_equal.part.0+0x310/0x310 [ 842.965119] ? __bpf_trace_mm_migrate_pages+0x150/0x150 [ 842.970476] ? vmacache_find+0x62/0x310 [ 842.974439] do_mbind+0xaaf/0xd60 [ 842.977879] ? __mpol_dup+0x4a0/0x4a0 [ 842.981668] ? wait_for_completion_io+0x10/0x10 [ 842.986338] ? get_nodes+0x218/0x290 [ 842.990043] __x64_sys_mbind+0x235/0x290 [ 842.994086] ? __ia32_sys_mbind+0x1b0/0x1b0 [ 842.998392] ? trace_hardirqs_off_caller+0x6e/0x210 [ 843.003396] ? do_syscall_64+0x21/0x620 [ 843.007716] do_syscall_64+0xf9/0x620 [ 843.011515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 843.016686] RIP: 0033:0x4665d9 [ 843.019930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 843.038972] RSP: 002b:00007f91edd09188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 843.046685] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 843.053962] RDX: 0000000000000000 RSI: 0000000000801100 RDI: 00000000203b5000 [ 843.061231] RBP: 00007f91edd091d0 R08: 0000000000000000 R09: 0000000000000002 [ 843.068495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 843.075784] R13: 00007fff8c96c32f R14: 00007f91edd09300 R15: 0000000000022000 16:53:45 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:53:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106000d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:45 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x8303000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x700) 16:53:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106100d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffa888, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 843.280527] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 843.293738] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xe4f) 16:53:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) 16:53:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xec0) 16:53:45 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x8403000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 843.632354] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 843.676882] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:45 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801102, 0x0, 0x0, 0x0, 0x2) 16:53:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf00) 16:53:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 16:53:45 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x8503000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 844.093970] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 844.133925] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x2000) 16:53:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 16:53:46 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x8803000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4800) 16:53:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:46 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801104, 0x0, 0x0, 0x0, 0x2) 16:53:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4c00) 16:53:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:46 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x8cffffff00000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 16:53:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4f0e) 16:53:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) 16:53:47 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb503000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:47 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801108, 0x0, 0x0, 0x0, 0x2) 16:53:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6000) 16:53:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:47 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb603000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) 16:53:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:47 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb703000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6800) 16:53:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="0f000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6c00) 16:53:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) 16:53:48 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x2, 0x0, 0x0, 0x2) 16:53:48 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb803000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106a00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7400) 16:53:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) 16:53:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106b00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) 16:53:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:48 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xb903000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7a00) 16:53:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106c00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:49 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4, 0x0, 0x0, 0x2) 16:53:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) 16:53:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00e0000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xc00e) 16:53:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106d00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:49 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xba03000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106e00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="e03f0300120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) [ 847.434016] validate_nla: 18 callbacks suppressed [ 847.434025] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf000) [ 847.490275] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:49 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbb03000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106f00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 847.646726] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 847.700161] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:50 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x8, 0x0, 0x0, 0x2) 16:53:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60030020120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107000d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x34000) 16:53:50 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbc03000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 848.198990] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="00f0ff7f120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107100d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 848.252836] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:50 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbd03000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x400300) 16:53:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 848.585141] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 848.629518] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:50 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0xf0, 0x0, 0x0, 0x2) 16:53:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="effdffff120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:50 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbe03000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf0ffff) 16:53:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x1000000) 16:53:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000f0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:51 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) [ 849.163206] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 849.188283] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:51 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xbf03000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x2000000) 16:53:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60020000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:51 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0xf000, 0x0, 0x0, 0x2) 16:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:51 executing program 1: unshare(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:51 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xe2e1f5e000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x3000000) 16:53:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60030000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4000000) 16:53:51 executing program 1: unshare(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:51 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xea26000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x5000000) 16:53:52 executing program 1: unshare(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:52 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0xf0ffff, 0x0, 0x0, 0x2) 16:53:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60060000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:52 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xf6ffffff00000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6000000) 16:53:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:52 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7000000) 16:53:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60070000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:52 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfbffffff00000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:52 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x8000000) 16:53:53 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x2000000, 0x0, 0x0, 0x2) 16:53:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60080000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfcfdffff00000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107a00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf000000) 16:53:53 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 16:53:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107b00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x20000000) 16:53:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600a0000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107c00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 16:53:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x48000000) 16:53:53 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4000000, 0x0, 0x0, 0x2) 16:53:53 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xfdfdffff00000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107d00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600c0000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) 16:53:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600e0000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107e00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:53 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:53:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4c000000) 16:53:53 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xff0f000000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600f0000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4f0e0000) 16:53:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) 16:53:54 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x8000000, 0x0, 0x0, 0x2) 16:53:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:54 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffff030000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60100000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x60000000) 16:53:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) 16:53:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60600000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 852.689537] validate_nla: 23 callbacks suppressed [ 852.689546] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:54 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffff1f0000000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) [ 852.754350] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x68000000) 16:53:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 852.957690] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 853.032111] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x700) 16:53:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60f00000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:55 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0xfffff000, 0x0, 0x0, 0x2) 16:53:55 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffffff7f00000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6c000000) [ 853.397991] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 853.428335] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60860200120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x74000000) [ 853.451831] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 16:53:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff000000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:55 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffffffff00000000, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000300120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) [ 853.664797] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 853.712203] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:56 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x1000000000000, 0x0, 0x0, 0x2) 16:53:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000600120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7a000000) 16:53:56 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffffffffffff0700, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000700120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 854.247558] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:53:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x9effffff) 16:53:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:56 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffffffffffffff7f, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108a00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xc00e0000) 16:53:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000a00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:56 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0xf0ffffffffffff, 0x0, 0x0, 0x2) 16:53:56 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f0000000240)={[{@fault_injection}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) unshare(0x400) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000177000/0x1000)=nil) 16:53:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108b00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf0ffffff) 16:53:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108c00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000c00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:57 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0xa}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xfffff000) 16:53:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108d00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000e00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 855.313666] erofs: read_super, device -> /dev/loop5 16:53:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xffffff7f) [ 855.339828] erofs: options -> fault_injection [ 855.339828] 0x0000000000000000,fowner>00000000000000000000, [ 855.360415] erofs: cannot find valid erofs superblock 16:53:57 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x200000000000000, 0x0, 0x0, 0x2) 16:53:57 executing program 1 (fault-call:2 fault-nth:0): unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:53:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108e00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60c00e00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:57 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x61}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xffffff9e) 16:53:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xfffffff0) [ 855.969281] erofs: read_super, device -> /dev/loop5 16:53:57 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:53:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108f00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000f00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 856.008407] erofs: options -> fault_injectiona0x0000000000000000,fowner>00000000000000000000, [ 856.047858] erofs: cannot find valid erofs superblock 16:53:58 executing program 1: unshare(0x400) unshare(0x2020800) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:53:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x40030000000000) [ 856.123413] erofs: read_super, device -> /dev/loop5 [ 856.128855] erofs: options -> fault_injectiona0x0000000000000000,fowner>00000000000000000000, [ 856.138087] erofs: cannot find valid erofs superblock 16:53:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60655800120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:58 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x2}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:58 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x400000000000000, 0x0, 0x0, 0x2) 16:53:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109000d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:58 executing program 1: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000180)={{r2}, "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"}) unshare(0x400) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, 0x0, 0x0) 16:53:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf0ffffffffffff) [ 856.485005] erofs: read_super, device -> /dev/loop5 16:53:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109100d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 856.511386] erofs: options -> fault_injection=0x0000000000000002,fowner>00000000000000000000, 16:53:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x100000000000000) 16:53:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60006000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 856.563413] audit: type=1800 audit(1625849638.463:2860): pid=25781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15919 res=0 [ 856.572229] erofs: cannot find valid erofs superblock 16:53:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60586500120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 856.699881] audit: type=1800 audit(1625849638.603:2861): pid=25781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15919 res=0 [ 856.728644] erofs: read_super, device -> /dev/loop5 [ 856.733688] erofs: options -> fault_injection=0x0000000000000002,fowner>00000000000000000000, 16:53:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x200000000000000) 16:53:58 executing program 1: r0 = fanotify_init(0x398e18f2dd138f81, 0x400) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) unshare(0x4040400) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, 0x0, 0x0) [ 856.813081] erofs: cannot find valid erofs superblock 16:53:58 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 856.980015] erofs: read_super, device -> /dev/loop5 [ 856.990092] erofs: options -> fault_injection=0x0000000000000003,fowner>00000000000000000000, [ 857.000009] erofs: cannot find valid erofs superblock [ 857.057675] erofs: read_super, device -> /dev/loop5 [ 857.062726] erofs: options -> fault_injection=0x0000000000000003,fowner>00000000000000000000, [ 857.081411] erofs: cannot find valid erofs superblock 16:53:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60008100120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:59 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) readv(r0, 0x0, 0x0) 16:53:59 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x800000000000000, 0x0, 0x0, 0x2) 16:53:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x300000000000000) 16:53:59 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x4}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:53:59 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@var={0x6, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0x9, 0x0, 0x0, 0xb, 0x3}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x7ff}]}]}, {0x0, [0x0, 0x30, 0x61, 0x30, 0x2e, 0x41, 0x61]}}, &(0x7f0000000300)=""/255, 0x51, 0xff}, 0x20) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000000800)=""/64, 0x40}], 0x5) unshare(0x400) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10b402, 0x0) readv(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x88, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xcd53, @empty, 0x1df3ee27}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x2, @remote, 0x49}]}, &(0x7f0000000100)=0x10) 16:53:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x400000000000000) [ 857.441749] erofs: read_super, device -> /dev/loop5 16:53:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60028600120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 857.498658] erofs: options -> fault_injection=0x0000000000000004,fowner>00000000000000000000, 16:53:59 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4ce43, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000000)=""/201) [ 857.560593] erofs: cannot find valid erofs superblock 16:53:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:53:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x500000000000000) 16:53:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600ec000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 857.663565] erofs: read_super, device -> /dev/loop5 [ 857.668798] audit: type=1804 audit(1625849639.573:2862): pid=25863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir780065031/syzkaller.ZJ9xhO/1568/bus" dev="sda1" ino=15924 res=1 [ 857.668983] erofs: options -> fault_injection=0x0000000000000004,fowner>00000000000000000000, 16:53:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 857.776698] erofs: cannot find valid erofs superblock [ 857.819714] validate_nla: 11 callbacks suppressed [ 857.819722] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 857.826636] audit: type=1800 audit(1625849639.603:2863): pid=25863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15924 res=0 [ 857.863218] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 857.907015] audit: type=1804 audit(1625849639.613:2864): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir780065031/syzkaller.ZJ9xhO/1568/bus" dev="sda1" ino=15924 res=1 [ 857.932737] audit: type=1800 audit(1625849639.613:2865): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15924 res=0 16:54:00 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x8000000000000000, 0x0, 0x0, 0x2) 16:54:00 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x7, 0xed6}) unshare(0x400) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000180)) readv(r1, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) fsetxattr$security_ima(r2, &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "6ac6d0438b911e0d736218615a91283f"}, 0x11, 0x2) 16:54:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000f000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:00 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x5}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x600000000000000) 16:54:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 858.513515] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 858.515223] erofs: read_super, device -> /dev/loop5 16:54:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000ff00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 858.560861] erofs: options -> fault_injection=0x0000000000000005,fowner>00000000000000000000, [ 858.589245] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:00 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) unshare(0x100) [ 858.622459] erofs: cannot find valid erofs superblock 16:54:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x700000000000000) 16:54:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:00 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x6}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 858.862124] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 858.915375] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 858.926801] erofs: read_super, device -> /dev/loop5 [ 858.948590] erofs: options -> fault_injection=0x0000000000000006,fowner>00000000000000000000, [ 858.979217] erofs: cannot find valid erofs superblock [ 859.052480] erofs: read_super, device -> /dev/loop5 [ 859.061140] erofs: options -> fault_injection=0x0000000000000006,fowner>00000000000000000000, [ 859.077507] erofs: cannot find valid erofs superblock 16:54:01 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0xfffffffffffff000, 0x0, 0x0, 0x2) 16:54:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000330001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:01 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) unshare(0x2000200) 16:54:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109a00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x800000000000000) 16:54:01 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x7}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109b00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 859.343365] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 859.381651] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:01 executing program 1: unshare(0x400) unshare(0x10000400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) unshare(0x30010000) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 16:54:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000670001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 859.451205] erofs: read_super, device -> /dev/loop5 16:54:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109c00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf00000000000000) [ 859.497732] erofs: options -> fault_injection=0x0000000000000007,fowner>00000000000000000000, [ 859.545714] erofs: cannot find valid erofs superblock 16:54:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000ff0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 859.613231] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 859.650316] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:01 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x2, 0x2) 16:54:01 executing program 1: ptrace(0x4207, 0xffffffffffffffff) unshare(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x10040000) unshare(0x20000) readv(r0, 0x0, 0x0) 16:54:01 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109d00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000200120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x2000000000000000) 16:54:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000300120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 860.064222] erofs: read_super, device -> /dev/loop5 [ 860.075204] erofs: options -> fault_injection=0x0000000000000008,fowner>00000000000000000000, [ 860.099996] erofs: cannot find valid erofs superblock 16:54:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109e00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4800000000000000) 16:54:02 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x60}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:02 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20800) readv(r0, 0x0, 0x0) unshare(0x0) 16:54:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000400120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 860.342102] erofs: read_super, device -> /dev/loop5 [ 860.360164] erofs: options -> fault_injection=0x0000000000000060,fowner>00000000000000000000, [ 860.397352] erofs: cannot find valid erofs superblock 16:54:02 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x4, 0x2) 16:54:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4c00000000000000) 16:54:02 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f0000000000)) unshare(0x14000200) readv(r0, 0x0, 0x0) 16:54:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000109f00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000600120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:02 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x300}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a000d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:02 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x60030300) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x440203, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/99, 0x63}], 0x4, 0x6, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x4, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7ff, 0x40}, 0x80, 0x5, 0x9, 0x5, 0x20, 0x6b9, 0xca}, 0xffffffffffffffff, 0xc, r0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x11}, @local}, 0x8) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000001300)={0xd, 0x4, 0x8000}) [ 860.827985] erofs: read_super, device -> /dev/loop5 16:54:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000700120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4f0e000000000000) [ 860.855707] erofs: options -> fault_injection=0x0000000000000300,fowner>00000000000000000000, 16:54:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a100d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 860.910787] erofs: cannot find valid erofs superblock 16:54:02 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x9, 0x19, 0xa, 0xf, 0x6, 0x0, 0x2, 0x8b, 0x1}) readv(r0, 0x0, 0x0) 16:54:03 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x8, 0x2) 16:54:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6000000000000000) 16:54:03 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x383}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a200d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000800120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:03 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x795d02, 0x0) readv(r0, 0x0, 0x0) 16:54:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000a00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 861.528235] erofs: read_super, device -> /dev/loop5 [ 861.540248] erofs: options -> fault_injection=0x0000000000000383,fowner>00000000000000000000, 16:54:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6800000000000000) [ 861.587483] erofs: cannot find valid erofs superblock 16:54:03 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1892c0, 0x0) readv(r0, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) 16:54:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:03 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x384}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 861.797023] erofs: read_super, device -> /dev/loop5 [ 861.802236] erofs: options -> fault_injection=0x0000000000000384,fowner>00000000000000000000, [ 861.812873] erofs: cannot find valid erofs superblock 16:54:04 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0xf0, 0x2) 16:54:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x6c00000000000000) 16:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000c00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 1: unshare(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x4010000) readv(r0, 0x0, 0x0) unshare(0x40000000) 16:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a500d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x385}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000e00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7400000000000000) [ 862.258280] IPVS: ftp: loaded support on port[0] = 21 [ 862.266080] erofs: read_super, device -> /dev/loop5 [ 862.292388] erofs: options -> fault_injection=0x0000000000000385,fowner>00000000000000000000, 16:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a600d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 862.360347] erofs: cannot find valid erofs superblock 16:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000f00120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a700d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x7a00000000000000) [ 862.590243] IPVS: ftp: loaded support on port[0] = 21 16:54:04 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0xf000, 0x2) 16:54:04 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x388}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60001000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a800d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x9effffff00000000) 16:54:04 executing program 1: unshare(0x54020f80) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x224280, 0x0) readv(r0, 0x0, 0x0) 16:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60006000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 862.996967] validate_nla: 18 callbacks suppressed [ 862.996977] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 863.017193] erofs: read_super, device -> /dev/loop5 16:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000f000120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010a900d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:05 executing program 1: unshare(0x22000f00) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) [ 863.059289] erofs: options -> fault_injection=0x0000000000000388,fowner>00000000000000000000, [ 863.076330] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xc00e000000000000) 16:54:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010aa00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 863.154042] erofs: cannot find valid erofs superblock [ 863.197341] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 863.238022] erofs: read_super, device -> /dev/loop5 [ 863.263151] erofs: options -> fault_injection=0x0000000000000388,fowner>00000000000000000000, [ 863.289218] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 863.314159] erofs: cannot find valid erofs superblock 16:54:05 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0xf0ffff, 0x2) 16:54:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60008602120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:05 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000040)={{0x8, 0x9}, 'port1\x00', 0x2, 0x800, 0x9, 0xffffffff, 0x1, 0x4, 0x4, 0x0, 0x1, 0x81}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r3 = getpgid(0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x40500, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={r1, r4, 0xdb}) 16:54:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010ab00d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xf0ffffff00000000) 16:54:05 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3b5}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000003120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 864.044289] erofs: read_super, device -> /dev/loop5 [ 864.049438] erofs: options -> fault_injection=0x00000000000003b5,fowner>00000000000000000000, [ 864.060973] erofs: cannot find valid erofs superblock [ 864.075009] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100201d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:06 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3b6}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 864.142225] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000006120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xffffff7f00000000) 16:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100301d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 864.243956] erofs: read_super, device -> /dev/loop5 [ 864.249020] erofs: options -> fault_injection=0x00000000000003b6,fowner>00000000000000000000, [ 864.332093] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 864.336494] erofs: cannot find valid erofs superblock [ 864.398670] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:06 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x2000000, 0x2) 16:54:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000007120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100401d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:06 executing program 1: mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x88, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1400000000}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x66}}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@euid_gt}, {@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x36, 0x38, 0x10, 0x1b, 0x6, 0x8, 0x0, 0x8d, 0x1}}) readv(r0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x2e, 0x2f, 0x9, 0x1b, 0x5, 0x401, 0x6, 0x70, 0xffffffffffffffff}}) 16:54:06 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3b7}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xffffffff00000000) 16:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100501d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 864.997596] rtc_cmos 00:00: Alarms can be up to one day in the future [ 865.003562] erofs: read_super, device -> /dev/loop5 [ 865.012286] erofs: options -> fault_injection=0x00000000000003b7,fowner>00000000000000000000, [ 865.014390] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000a120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 865.057154] erofs: cannot find valid erofs superblock 16:54:07 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) unshare(0x6000000) 16:54:07 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3b8}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100601d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 865.129092] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000c120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 865.237477] erofs: read_super, device -> /dev/loop5 [ 865.262303] erofs: options -> fault_injection=0x00000000000003b8,fowner>00000000000000000000, [ 865.293358] erofs: cannot find valid erofs superblock [ 865.392170] erofs: read_super, device -> /dev/loop5 [ 865.408780] erofs: options -> fault_injection=0x00000000000003b8,fowner>00000000000000000000, [ 865.431771] erofs: cannot find valid erofs superblock 16:54:07 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x4000000, 0x2) 16:54:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0xfffffffffffff000) 16:54:07 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x2f, 0x2e, 0x9, 0x8, 0x6, 0x842f, 0x2, 0x10f, 0x1}) readv(r0, 0x0, 0x0) 16:54:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100701d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000e120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:07 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3b9}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:07 executing program 1: ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) [ 865.940771] erofs: read_super, device -> /dev/loop5 [ 865.950538] erofs: options -> fault_injection=0x00000000000003b9,fowner>00000000000000000000, [ 865.979025] erofs: cannot find valid erofs superblock 16:54:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r4) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x18, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000", @ANYRES16=r5, @ANYBLOB="02002dbd7000fddbdf251500000008001f00070000000c000600020000000000000005001e000000000008002100000000000c00060003000000000000000c0006000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x4048001) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={0x1c, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100801d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000c00e120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:08 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3ba}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:08 executing program 1: unshare(0x400) unshare(0x0) unshare(0x10000000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) [ 866.170630] erofs: read_super, device -> /dev/loop5 [ 866.190246] erofs: options -> fault_injection=0x00000000000003ba,fowner>00000000000000000000, [ 866.225181] erofs: cannot find valid erofs superblock 16:54:08 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x8000000, 0x2) 16:54:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000f120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100901d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000400}, 0x4089) 16:54:08 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) fallocate(r0, 0xc, 0x6, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r1, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000000)) unshare(0x0) readv(r0, 0x0, 0x0) 16:54:08 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3bb}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100a01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 867.077572] erofs: read_super, device -> /dev/loop5 [ 867.082717] erofs: options -> fault_injection=0x00000000000003bb,fowner>00000000000000000000, [ 867.099926] audit: type=1800 audit(1625849649.004:2866): pid=26436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=13967 res=0 [ 867.122750] erofs: cannot find valid erofs superblock 16:54:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60006558120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100b01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:09 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3bc}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100c01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 867.261746] audit: type=1800 audit(1625849649.164:2867): pid=26444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=13967 res=0 16:54:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000060120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 867.320106] erofs: read_super, device -> /dev/loop5 [ 867.329804] erofs: options -> fault_injection=0x00000000000003bc,fowner>00000000000000000000, [ 867.383985] erofs: cannot find valid erofs superblock [ 867.455225] erofs: read_super, device -> /dev/loop5 [ 867.464059] erofs: options -> fault_injection=0x00000000000003bc,fowner>00000000000000000000, [ 867.482315] erofs: cannot find valid erofs superblock 16:54:09 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0xfffff000, 0x2) 16:54:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="262d9c5ebbe62b2e94"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004890) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:09 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2801c2, 0x0) unshare(0x2a000880) readv(r0, 0x0, 0x0) 16:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100e01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60005865120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:09 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3bd}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100f01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 867.888178] erofs: read_super, device -> /dev/loop5 [ 867.901654] erofs: options -> fault_injection=0x00000000000003bd,fowner>00000000000000000000, [ 867.927208] erofs: cannot find valid erofs superblock 16:54:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000081120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:09 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xe8001, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000000) r5 = dup3(r3, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x100000000) dup3(r8, r7, 0x0) io_submit(r2, 0x6, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xfff, r5, &(0x7f0000000140)="1a4734d335d52b8d78b302d2a473aea359c1cae6829566976456e272b9ad07386b7d8f6a109e0b157174cc00df17c24cbad94719443f167f570e305ff79d3daf22b078bfeb0fa00a49e4f20b12bd2f1a5223b4aec3b52f04ad6cd530718663be97b427b26b6a4a51d814dcdc72de735acd074c091a0509528c7fce76b56ac54eb1eaa8e1606e6e7100daffa286158b68772d474c33b4440a0c6658d9aa8efb567421ad4433ef17dc5995bc4f625428953d6c617db6566275a31fad6d5307adf7dd4c400c52847bd09130f5465e7a08e44141b604f1", 0xd5, 0x7, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x4, r4, &(0x7f0000000340)="e23270aa6de1c70ab2d25b8637c497582334443a8f808cf8dd7f0715496e629445aea74c10df00a89f3737fadf92ec787ab8a52bccfc03d15c7f3f5d9edd425011f41bead73e22d6addc9fb847a0560aabb5252db16820ae5f57def5ff613e48252a79c50f67a74729a529f95214bf4cda63cfe24e4be2bf5f79a95979935da835120cded314c8179cad6b338cb708107fa9f862ef96720904b027b0151d0e0538f692e52672e49845be8a497fac6e08cbe89ba2f81fe563bbdf38680337f5f462017fe5138adcced16c26a08148d8a33ad85cddc76362cd8f01e467cb8704d4ccf566ff93f2aa00862561511a841523dc00", 0xf2, 0x3ff, 0x0, 0x1, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000280)="9b5153befb447f38b6a243a5d90c04602d316990b601", 0x16, 0x5, 0x0, 0x3, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000440)="60d4c9ffa6d2995e447a546f160c6340477d5b51cf22a6b86bf0ef9a910c9fdb7bd6801e0652e699258c0418af54db71755a2f493c227307e8e73d83c0590960015e98b04be8d2c94b25f71a71d557e6bea5c8a1cdddba4278eca74b395d72e56c6de31fd3de417b8756b245477415f43c63518152fd7ba8966aba69a6351cf2fef8ee2a7b75a32b377c2ccb42fd77506c4f547923307a379eabbc2a0f3bf47e3d36800be4c2d7ca299001dffd519559c329e9188b6daf72759f4ec6b2d053160c0a1eee0c7504b22e0043966a0c38746be0ff0c703c39f92db0677fb709564816edfa18a61766a9d1c9bbca47", 0xed, 0x2, 0x0, 0x4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x2, r4, &(0x7f00000005c0), 0x0, 0x8, 0x0, 0xb93f9ceba18fb660, r1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x0, r8, &(0x7f0000000640)="6fae6d3ff91bb42555d3c86b19b81c5a3177e07f2b4b1a0fdeb61809277f1fbb641f83a6842c6ecbc6a2ff479581041e0b3b25d46df2cb4a1e79775fabf30a4f6775958f20de7af2af7cb916ada36ce6607206d44f00b2f1ccb1cbc1803e924bd8fb7a14e0fb86ecb309cc3a84e5ba76b9758add4cf2ac05d1e9bd7005cd51107deed4407b1480ea87834a337377d6101315f8188a1a", 0x96, 0x3, 0x0, 0x2, r3}]) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000007, 0x110, r1, 0x4cb9a000) readv(r0, 0x0, 0x0) 16:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000101001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73b97fb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f57ee57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5701a278}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6039f033}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40b87275}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8e02ed}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdfa6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69cdd1a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xedb3f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x794c9584}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6253}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x697430ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7907bdf9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5652}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe72}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf915}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2efb051b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6114}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7f0b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5339}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b1036b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5b8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8195}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ccc8b08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x394b043c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf249}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b4ad2fe}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x795e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7643}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccb1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d26}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406dc5b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9401b56}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2041008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000001214000227bd7000fcdbdf2508004f0006001400"], 0x18}, 0x1, 0x0, 0x0, 0x2000814}, 0x4040) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000000) r6 = dup3(r4, r2, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000031c0), 0x1, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x100000000) r11 = signalfd(r6, &(0x7f0000003440)={[0x10000]}, 0x8) io_submit(r3, 0x9, &(0x7f00000034c0)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="0540d3764c5e92cda78cb9bbea5c8116747cfae9b0f6b08e82f4769c56627151a95d0a11e5dc9fdb250e1655f32db85ca632478f91bf93d1308081ea80282249ea23cde59a5b4820601a82f49bb2ea4ebe033591ddce29bbdc9846c1c7451b3ba243b4dbfd0a0f5d756f01f891aa90dc89936c6f2d42cae658ac14063dbad9969b02e04b024b64a12370e8c6118af21e4ec66ee8fe709b743f767df304a5c1265dbcf46347af2cee908e4d0bb4ff5f0f8f361ea8f516c5a2", 0xb8, 0x800, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0xe39f, r6, &(0x7f0000000940)="2033cd40e33a0431be48ae01c5b701", 0xf, 0x1, 0x0, 0x3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x8001, 0xffffffffffffffff, &(0x7f0000000a80)="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", 0x1000, 0x1, 0x0, 0x8d8095f8a9dbadef, r2}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x7, 0xd6, r2, &(0x7f0000001a80)="600120f81020e954b5b892a54c95c8246cdfd2b67644db6be2b9b7a2131a4bae550600eddc6e2c05cfd293ee3de4b7ca21e5903a37787cb6c258cd18f9da81dd97eed324fc50e44c091195b30c5db0ab19bea8634fd34ae719f15b623ff012796c615810e623b61ce79dd401928e691d11cc4abdf1c961eb640b5873b73b092c", 0x80, 0x98, 0x0, 0x2, r2}, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x6, 0x80, 0xffffffffffffffff, &(0x7f0000002fc0)="00448b9c3d6c3a2f1a8517920bae6782b0733895b6c14826e6e06f755bb27dfbf5d364de1d383ecb5fac59b82179aae12d10066455139d340fb475f0f7c8fdcbf5e70a8aacbd3c7b03f6a48545c4c1409e4c2a7e9d2aa35e236ceff08d74febfbc5dbf2d643480d59c39770bb07601307f009133bbace94d0e702d61706030ee2813e2d5f1b6ab43a762e90d5dd043e6a80c53d5751834c5507d", 0x9a, 0xffffffffffff7c31, 0x0, 0x0, r7}, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000003100)="c94a52a4cbc5689ad875e33eaead075a9dc6fe35dc004eccd6fe946eb1035215b940cd04af2f16a5862e1893a013c644001890162f0086e8e52163febfc5b0c2ac44ba938aec0810995bfcd02cb3c2cb0655bc60f6dbd734fb9a67c4f1ba775430a60db9413ec576da6fd5e91abfcafc9dc06cb5ffccf0cdce6ed9ef0c1d00ef06f76542dff05f204ca9314a1f28fe09", 0x90, 0x1f, 0x0, 0x0, r8}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x8, 0x3, r5, &(0x7f0000003240)="16b0bf1164f31122b4c7a6d0d940a491c0cb3ad7aab19847c3c2e5d6a86345e6b1ce41a530b84e7dee57b1ab50fbf5629f780cfdaf6205784f93cf6f1ed5103f98d53a", 0x43, 0x9, 0x0, 0x0, r6}, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x8001, r5, &(0x7f0000003300)="c4ae038dbbd919794191e9491852b536bbd1a621de1cb806d87b4e7bdc2bc36066637f70fbcd08c2bda21ad37660de401303177b1a2ba288da2a75959d1d40338925f7957c53b9ed0fd56ea1ff77a1710540fa04", 0x54, 0x100000000, 0x0, 0x2}, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x1, 0x2, r10, &(0x7f00000033c0)="cac8aef0f5313a7246c79f46037cdf7491887af0e3029324db7712013aafc00bf46f31197d015d7211b7885f2867a4e9dd5c21fa319b47bdc190e74456ad7d1ec2931be347ce91d4933042f58c96dd123bb69fc5d0", 0x55, 0xfff, 0x0, 0x1, r11}]) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c004}, 0x40000) 16:54:09 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3be}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 868.021553] audit: type=1800 audit(1625849649.924:2868): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14012 res=0 [ 868.087541] validate_nla: 6 callbacks suppressed [ 868.087550] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 868.130145] audit: type=1800 audit(1625849650.034:2869): pid=26501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14003 res=0 [ 868.186393] audit: type=1800 audit(1625849650.074:2870): pid=26505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14012 res=0 [ 868.210749] erofs: read_super, device -> /dev/loop5 [ 868.220099] erofs: options -> fault_injection=0x00000000000003be,fowner>00000000000000000000, [ 868.257851] erofs: cannot find valid erofs superblock [ 868.259454] audit: type=1800 audit(1625849650.144:2871): pid=26513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14003 res=0 [ 868.292920] audit: type=1800 audit(1625849650.154:2872): pid=26509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14012 res=0 [ 868.330886] audit: type=1800 audit(1625849650.234:2873): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14012 res=0 [ 868.370477] audit: type=1800 audit(1625849650.234:2874): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14012 res=0 [ 868.392281] audit: type=1800 audit(1625849650.234:2875): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14012 res=0 [ 868.473608] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:10 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x1000000000000, 0x2) 16:54:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000286120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104801d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:10 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3bf}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:10 executing program 1: unshare(0x480) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x80) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r8, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:10 executing program 1: unshare(0x70030100) unshare(0x40000000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) [ 868.800159] erofs: read_super, device -> /dev/loop5 [ 868.811644] erofs: options -> fault_injection=0x00000000000003bf,fowner>00000000000000000000, 16:54:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000104c01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000ec0120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 868.845776] erofs: cannot find valid erofs superblock [ 868.862110] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:10 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x500}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 868.912786] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 868.919498] IPVS: ftp: loaded support on port[0] = 21 16:54:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000f0120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x50) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300020000fcdbdf2501004b8e77d9429e7942000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4006800}, 0x1) [ 869.055209] erofs: read_super, device -> /dev/loop5 [ 869.080041] erofs: options -> fault_injection=0x0000000000000500,fowner>00000000000000000000, [ 869.118929] erofs: cannot find valid erofs superblock 16:54:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000ff120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:11 executing program 1: unshare(0x44010f00) unshare(0x4060000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:11 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x600}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:11 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0xf0ffffffffffff, 0x2) 16:54:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x20, r1, 0x301, 0x0, 0x4, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x48) 16:54:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106801d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 869.593848] erofs: read_super, device -> /dev/loop5 16:54:11 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2fa90aa0d5869423, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x1e, 0x18, 0x17, 0x7, 0xb, 0x8, 0x3, 0xf7}) readv(r0, 0x0, 0x0) 16:54:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103002000002f082f8e94034a1d080006001d7935618fdb7892dab194b67db8bf9f672623947b0ff4d809179ead0df0ac3bdcf2ca999e44eeb09eaf2337e580968f7656aeabc5bb85", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "60a6c8c748f8173567b45758e966f949401b3188fa49c44e9bd7c7b3836c926c"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xa0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e9818d8bc37c2c29ee7897995175aa36"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4e9db8d943aa1a5a66df43409efe043d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f71713f09229c50801c89c859367151c078f78a962f0ac870a1034ceeaffa273"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 869.638316] erofs: options -> fault_injection=0x0000000000000600,fowner>00000000000000000000, [ 869.675752] erofs: cannot find valid erofs superblock 16:54:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000106c01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000f0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:11 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x700}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000002120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 869.855705] erofs: read_super, device -> /dev/loop5 16:54:11 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20000000) readv(r0, 0x0, 0x0) [ 869.886979] erofs: options -> fault_injection=0x0000000000000700,fowner>00000000000000000000, [ 869.926208] erofs: cannot find valid erofs superblock 16:54:12 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x200000000000000, 0x2) 16:54:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107401d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000003120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:12 executing program 1: unshare(0x400) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="8510000007000000b515a6fff0ffffff950000000000000060fa478c080000009500000000000000d571f4ff080000006da45f1da8d31b4008464d6171cd94ef20b1cbc085157d3ccbf283fb51db2d27ecf44cd47d598d3e9965e75463a491cf1910cb00dbb40a761f2f7db16dba06da07a75d3f29353f3487de437b1c2c718192081efc3e6e52647177cc4ba73f210acc457708bfea9a2b74f07c18d328ada506cff2630c5953c8df2faf3a0016a22e4de30e1fa13f0efd4132ebf84c1558e63b7aade536159def245e383cafe8cd4a2dff303c22a66fcdfb04bf74563635e6561468"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xd2, &(0x7f0000000180)=""/210, 0x40f00, 0x0, '\x00', 0x0, 0x7, r0, 0x8, &(0x7f0000000080)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x5, 0x0, 0xffffff2d, 0x4}, 0x10, 0xffffffffffffffff}, 0x78) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, 0x0, 0x0) 16:54:12 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x2000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x2400c810) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000004120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 870.791168] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 870.820302] erofs: read_super, device -> /dev/loop5 [ 870.833284] erofs: options -> fault_injection=0x0000000000002000,fowner>00000000000000000000, 16:54:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107a01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 870.884224] erofs: cannot find valid erofs superblock 16:54:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4809c) 16:54:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000006120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:12 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x125000, 0x0) readv(r0, 0x0, 0x0) 16:54:12 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x26ea}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 871.001223] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 871.044674] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 871.060579] erofs: read_super, device -> /dev/loop5 [ 871.068299] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.074356] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.105096] erofs: options -> fault_injection=0x00000000000026ea,fowner>00000000000000000000, [ 871.126516] erofs: cannot find valid erofs superblock [ 871.205226] erofs: read_super, device -> /dev/loop5 [ 871.210476] erofs: options -> fault_injection=0x00000000000026ea,fowner>00000000000000000000, [ 871.254801] erofs: cannot find valid erofs superblock 16:54:13 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x400000000000000, 0x2) 16:54:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000108601d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000007120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:13 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) unshare(0x20080) 16:54:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x20000040) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600fa11fd8ecd8468d3d76a49e5c1ab456426e1e1b22e71e89e8a", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) 16:54:13 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3f00}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000008120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100003d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 871.718978] erofs: read_super, device -> /dev/loop5 [ 871.737510] erofs: options -> fault_injection=0x0000000000003f00,fowner>00000000000000000000, 16:54:13 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) readv(r0, 0x0, 0x0) [ 871.783759] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 871.822864] erofs: cannot find valid erofs superblock 16:54:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000a120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000000dd000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 16:54:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100005d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 871.924948] erofs: read_super, device -> /dev/loop5 [ 871.948474] erofs: options -> fault_injection=0x0000000000003f00,fowner>00000000000000000000, [ 871.993753] erofs: cannot find valid erofs superblock 16:54:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000c120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:14 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 16:54:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100007d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:14 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x800000000000000, 0x2) 16:54:14 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x6000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa906700db87a9458}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x40000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:14 executing program 1: unshare(0x10000c00) unshare(0x40000) unshare(0x10000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000e120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100009d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 872.612682] erofs: read_super, device -> /dev/loop5 [ 872.628368] erofs: options -> fault_injection=0x0000000000006000,fowner>00000000000000000000, [ 872.650290] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 872.674839] erofs: cannot find valid erofs superblock 16:54:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000f120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000ad7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:14 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8100}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:14 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10f00, 0x0) readv(r0, 0x0, 0x0) [ 872.754518] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:14 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000010120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000bd7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 872.898913] erofs: read_super, device -> /dev/loop5 [ 872.914181] kauditd_printk_skb: 4 callbacks suppressed [ 872.914191] audit: type=1800 audit(1625849654.824:2880): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14497 res=0 [ 872.923067] erofs: options -> fault_injection=0x0000000000008100,fowner>00000000000000000000, [ 873.102713] erofs: cannot find valid erofs superblock [ 873.155675] erofs: read_super, device -> /dev/loop5 [ 873.160789] erofs: options -> fault_injection=0x0000000000008100,fowner>00000000000000000000, [ 873.178050] erofs: cannot find valid erofs superblock 16:54:15 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x8000000000000000, 0x2) 16:54:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000060120001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000ed7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x6]}, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x38d385bb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x240008c0}, 0x20000080) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x71}}}}, [@NL80211_ATTR_CSA_IES={0x34, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x9, 0x40, 0x8000, 0x3, 0x179b]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1, 0xfff, 0xb41a, 0x1, 0x100, 0x9, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x5, 0xfe00, 0x2]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4040041) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x1, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 16:54:15 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8303}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000fd7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 873.748135] validate_nla: 2 callbacks suppressed [ 873.748149] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 873.774410] erofs: read_super, device -> /dev/loop5 [ 873.785062] erofs: options -> fault_injection=0x0000000000008303,fowner>00000000000000000000, 16:54:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000330001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100014d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 873.819673] erofs: cannot find valid erofs superblock [ 873.835576] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB="1cbbd6daf60eb44da67e2001eb626ad5869b45927586"], 0x1c}}, 0x0) 16:54:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000670001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:15 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8403}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100039d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 874.064364] erofs: read_super, device -> /dev/loop5 [ 874.081229] erofs: options -> fault_injection=0x0000000000008403,fowner>00000000000000000000, [ 874.132255] erofs: cannot find valid erofs superblock 16:54:16 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0xfffffffffffff000, 0x2) 16:54:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100071d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000ff0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:16 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8503}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000107fffd7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000f0001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 875.043462] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 875.050189] erofs: read_super, device -> /dev/loop5 [ 875.076790] erofs: options -> fault_injection=0x0000000000008503,fowner>00000000000000000000, [ 875.151920] erofs: cannot find valid erofs superblock 16:54:17 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20046080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x3c8, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59f04aa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f9bce4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64dbf6a9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36a37b05}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee713f7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25315eac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27406fce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4901991c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb362}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2daac469}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc38b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fba55e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2658}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e829c7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e232cdb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc78d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d9694d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d6ace35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51b2883d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb04}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4abf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x862e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4242}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfff2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x651ddc1b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f1967c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x571305b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c5db60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6316}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f1a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61928ecc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17bac9bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd3415c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x178b50f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x92a68f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a9bcdaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29a7c27f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a7c709a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a1924cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91d3e93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dd211dd}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xebeed7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5566628d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da41855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77a57124}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25e7c472}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4697fb7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27d82c78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a8dc3fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eb38a7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b2d398e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33941419}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7067314c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e19602}]}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x1405, 0x100, 0x70bd2a, 0x25dfdbfd, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6c810094", @ANYRES16=r4, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 16:54:17 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8803}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 875.224863] erofs: read_super, device -> /dev/loop5 [ 875.229925] erofs: options -> fault_injection=0x0000000000008503,fowner>00000000000000000000, [ 875.251709] erofs: cannot find valid erofs superblock 16:54:17 executing program 1: unshare(0x0) unshare(0x48000200) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x505102, 0x0) unshare(0x10000) readv(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000058a80)={0x0, 0x0, "e98ea847b17826b8707e08304c554450baec5ad38fb8225234dca52f2ec2997a63f299b3a2e7c66d062fd47158ef379bebb44e3d11af689523cbb34f66cc2714c723d29390005637b3312d4ca92abbeed89f839c2d4c1529c945ad92b63ede6e4e3530c2eff0e1eb7a1fe753c2d4d4576a6cbaaa4cb2f4a7f19cfb33b75e54db3508c1c5b530ebd73a3bd5dbc657e9f840b8fe17040707d7e5dca9d4a5f906bbc5a9f2f90037698a75ef4ad9f95d7166aa18307a10eccb34a756a3fabb09c6586cefd0300b5d373b0930ba9618f51aeca29cc46531f3d40f51ed6ba250adcf0bc737546529c30dcde8e26e186ea1293802b727052edef359948aab5d7f95a72e", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059a80)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "6d7174c17a9f56"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000005aa80)={{0x0, 0x3, 0x10001, 0x2, 0x0, 0x1, 0x8000, 0xffffffc0, 0x10000, 0x5, 0x3, 0x10000, 0x5c4bcaea, 0x1990, 0x6b9}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ab00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3}, {r4}], 0x1, "8f366cbcc976cb"}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000000) dup3(r5, r1, 0x0) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x100000000) dup3(r8, r7, 0x0) dup2(r5, r8) [ 875.352390] IPVS: ftp: loaded support on port[0] = 21 16:54:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100002d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 875.419063] audit: type=1800 audit(1625849657.324:2881): pid=26972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14094 res=0 [ 875.446080] erofs: read_super, device -> /dev/loop5 [ 875.451193] erofs: options -> fault_injection=0x0000000000008803,fowner>00000000000000000000, 16:54:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600932c2024522399d33b40f1e34f7a8f7d9070f466d9c1489951ee9105bb1c904228ea22b182cefa82f1956a90e6a5ef7dfbe4a636365ec567b35f67facea8a80ed1d17955a4f7ab61bcb1143b4ab9f19471ae9765dfcf5a2a4ba36a8552cbfac1a3a655ef9eb796030000000000000090c1e65d558d404ce14cfd00e762178c59e967f0543a73d482e4d488441f928ec8407df60e4efb45066744071a11e420494a0fb18f921c45b461202f53d1ca9069f8c3b078b6ca6910677fe4fd86125e29541355b0539e35b2d9a8c80303d7adeb87", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) [ 875.559854] erofs: cannot find valid erofs superblock [ 875.571929] audit: type=1800 audit(1625849657.424:2882): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14094 res=0 [ 875.638532] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 875.685567] IPVS: ftp: loaded support on port[0] = 21 [ 875.692016] audit: type=1800 audit(1625849657.594:2883): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14094 res=0 [ 875.748022] audit: type=1800 audit(1625849657.654:2884): pid=26972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14094 res=0 16:54:17 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x8) 16:54:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000330001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100003d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:17 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb503}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0aef009998defcfa1790ebbdc74601030000000000000000"], 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) 16:54:17 executing program 1: unshare(0x400) unshare(0x40000000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x600880, 0x0) readv(r0, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x1, 0x80) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000340)={0x1, 0x1, {0xd, 0x12, 0x11, 0x6, 0x3, 0x0, 0x4, 0x26, 0x1}}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2000c80) timer_create(0x1, &(0x7f0000000000)={0x0, 0xe, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) unshare(0x10000100) preadv(r2, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/73, 0x49}], 0x1, 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x100000001, 0x0, 0x7f, 0x1, 0x38, 0x5, 0x0, 0x4}, &(0x7f00000001c0)={0x1448, 0x40000007, 0x5, 0x3, 0xfffffffffffffbfd, 0xffffffffffffdf1a, 0x5, 0x4000000007fff}, &(0x7f0000000200)={0x6, 0x8, 0xa74, 0x1, 0x28, 0x7, 0x8, 0x5}, &(0x7f0000000780), &(0x7f0000000600)={&(0x7f0000000280)={[0x1ff]}, 0x8}) timer_settime(r3, 0xe7b409d878c601c2, &(0x7f00000000c0)={{0x77359400}, {r4, r5+10000000}}, &(0x7f0000000100)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xb, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000080)={0x0, 0x17, 0x2, @thr={&(0x7f00000004c0)="eb346e193f130ba23724d4230b0c5a1cc6c817eed9770d12eb4c359247adf6d3af5533b1cb65fb468b423bb432da15fab463a86d95411e2345f6ffdc7815ef6919697710cc66c1133f5c4a20bdc2330a674fb08f590f301b67a11acf3822d25f69d619e7ab4ca47f5caf37868ebc35c895ef26d9df8092782d9fcfa68a49eb1a6dac056d313266efd1e3dcb995d59683b5a54106105e99f1f59bfe4e0bee64e04c651e8614c41b19a95a4d4c", &(0x7f0000000640)="22c614eb0f95179ee3ae22aac4fd48fb80a15a1f4b044a3b067df81fa662fe4c4218881f4c2179e4932f9f9fe3363370affeb1bead99c0507ef77a4f3e2c8c1abcf870fd6f36d3d1290303a3be3a7d7aa59c270e47e249414e6934ed3ab66c44d7a1e99f0e51151d11a5756aecb94bd031dffad56d6c3fc6012464924b8c6892643d9889d1eb8efab10bf25f904548091513ff8968ae2306ff9eaff0a2ca964eb2ae4edac68596f67a50a3c0914f0a306c8f01974fbad46480cd81b3bc0ebaa1738cea39b686e803d9b3eb1f203f22a963e2e70419935aaa11ffd8440a293d4ed879118f"}}, &(0x7f0000000580)=0x0) timer_settime(r6, 0x1, &(0x7f00000005c0)={{}, {0x77359400}}, &(0x7f0000000740)) 16:54:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100005d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 876.100791] erofs: read_super, device -> /dev/loop5 [ 876.111928] erofs: options -> fault_injection=0x000000000000b503,fowner>00000000000000000000, [ 876.130494] IPVS: ftp: loaded support on port[0] = 21 [ 876.152320] erofs: cannot find valid erofs superblock 16:54:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000670001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 16:54:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100007d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:18 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb603}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120300d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 876.351861] erofs: read_super, device -> /dev/loop5 [ 876.372586] erofs: options -> fault_injection=0x000000000000b603,fowner>00000000000000000000, [ 876.385152] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 876.397073] erofs: cannot find valid erofs superblock [ 876.423873] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 876.477980] IPVS: ftp: loaded support on port[0] = 21 16:54:18 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f000042a000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000351000/0x2000)=nil) 16:54:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100008d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120400d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:18 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb703}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x24008080) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01030000e5ffffff001001000024e3355242", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 16:54:18 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x7603ca5f1e58046a, 0x0) readv(r0, 0x0, 0x0) [ 877.087893] erofs: read_super, device -> /dev/loop5 16:54:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120201d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 877.113165] erofs: options -> fault_injection=0x000000000000b703,fowner>00000000000000000000, 16:54:19 executing program 1: unshare(0x400) unshare(0x8010000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100009d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 877.157716] erofs: cannot find valid erofs superblock 16:54:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120301d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:19 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb803}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 877.245907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 16:54:19 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x0) readv(r0, 0x0, 0x0) [ 877.367831] erofs: read_super, device -> /dev/loop5 [ 877.391704] erofs: options -> fault_injection=0x000000000000b803,fowner>00000000000000000000, [ 877.426219] erofs: cannot find valid erofs superblock [ 877.474418] erofs: read_super, device -> /dev/loop5 [ 877.479590] erofs: options -> fault_injection=0x000000000000b803,fowner>00000000000000000000, [ 877.528874] erofs: cannot find valid erofs superblock 16:54:20 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x7ff, 0x800}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000ad7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120401d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:20 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x9, 0x15, 0x14, 0x9, 0x9, 0x10001, 0x2, 0x7e, 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x28) ioctl$RTC_UIE_OFF(r1, 0x7004) 16:54:20 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb903}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="6d5b3b94d1fef4a5d6b8e3b3134459a76163b4d0d9cbb1908f90525a485f849946b66f1eac7eda2008233291548cad116f795652186dbad4fb66c933153a8894c431128eaae82664284b7769b999ca375aa5963a09841d2f005a909f27f5e3a3701976109c23", @ANYRES16=r5, @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x80, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4000000) 16:54:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000bd7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:20 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) readv(r0, 0x0, 0x0) [ 878.494775] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 878.513552] erofs: read_super, device -> /dev/loop5 16:54:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120601d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 878.538286] erofs: options -> fault_injection=0x000000000000b903,fowner>00000000000000000000, 16:54:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000ed7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 878.584851] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 878.594345] erofs: cannot find valid erofs superblock 16:54:20 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x46000, 0x0) readv(r0, 0x0, 0x0) 16:54:20 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xba03}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 878.786656] erofs: read_super, device -> /dev/loop5 [ 878.826534] erofs: options -> fault_injection=0x000000000000ba03,fowner>00000000000000000000, [ 878.872715] erofs: cannot find valid erofs superblock [ 878.949602] erofs: read_super, device -> /dev/loop5 [ 878.959198] erofs: options -> fault_injection=0x000000000000ba03,fowner>00000000000000000000, [ 878.990063] erofs: cannot find valid erofs superblock 16:54:21 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x4) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a9e23d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5299a322}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}]}]}, 0x88}}, 0x80) 16:54:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120701d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000fd7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:21 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r1, 0x50bc6000) 16:54:21 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbb03}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100010d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 879.539405] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 879.584881] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 879.588329] erofs: read_super, device -> /dev/loop5 16:54:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120801d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 879.653218] erofs: options -> fault_injection=0x000000000000bb03,fowner>00000000000000000000, 16:54:21 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) unshare(0x400) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = dup(r0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) [ 879.694954] erofs: cannot find valid erofs superblock 16:54:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x801) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2956}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1001e}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7400000000000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008019}, 0x1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100014d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:21 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbc03}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 879.849285] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 879.888766] erofs: read_super, device -> /dev/loop5 [ 879.904968] erofs: options -> fault_injection=0x000000000000bc03,fowner>00000000000000000000, [ 879.921454] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 879.932586] erofs: cannot find valid erofs superblock 16:54:22 executing program 1: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120a01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100039d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x200, 0x70bd2b, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 16:54:22 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00006ab000/0x3000)=nil, &(0x7f0000640000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000934000/0x2000)=nil, &(0x7f0000261000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00007af000/0x2000)=nil, &(0x7f0000404000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)="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", 0x1000}, 0x68) 16:54:22 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbd03}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100071d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:22 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) syz_mount_image$befs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0xa6, 0x6, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0x1000, 0x4}, {&(0x7f0000000180)="46a326ad4728ac8bc386815f652f9d324724cf6e27fbc23593603b264f16c8125b0614fa7055e3b337618d56281980e1344d2cfe933ebe3fa5b792336373d877976b5e881b7e79ea8d8651d55347359bc2119d929e2a8160be3fa7f129107a", 0x5f, 0x80}, {&(0x7f0000000200)="cae272ae02f5754e61cdb152ba2875727b9f1b5711bf4d842917221b0044925e4bfe12ab981b8decab", 0x29, 0x6a}, {&(0x7f0000000240)="b3dab69c9c0a8526857f3edb5718f9348c7302f5aa659ab8c0e9e9185776ae680d6a9b7adf499a849ae0aa9956395be869b73f3941f8e6ef142a6ebb9d6fb1e8e9c40db53eb1cb557d894abdf63b1828b1b77b1d6f8c037576effd4a61f341129e9afa1fd71ba58eee9a3866a0255a9da9f18e98216f88eaf5096709b690a5ebf23fa0179b643102e1be", 0x8a, 0x9}, {&(0x7f0000000340)="d11679cfd193a61bfb900b43c66b985564af642af79f20c9f1ca374ae8db28f26934f64159a36d8daa6ad2cb40561783366c40bba7895c9b4ba8087faa5bdeaa034d58a732c4d69653027966f7a055e0179e4612d6eceb152843290797194f9858bf9015622f21f0901c4b3fb4ccb5f0533a4a8b9a0fe0770ccaac57cabe3f35d019336bf2dfb385553fe7b4b760320423c1db465e564460c28032d4446c69117d9f388b6e8d98c0b5034e0ba7aee489998944496c6e4a0a092a8e6e49bbc45591f35ef47e8e28441dde8786380aa1f5051d", 0xd2, 0xffffffff}, {&(0x7f0000000440)="b6b8bd9ce94d577285b9dabc318feb82409d8baf8837ff91411c091287df1b5ec6302b88e286e3cc68ca8d912f42c7fb541b24155dd6f37b8fb0f6eb249371370d7d64fbc1a46688db99b8119a9b8f11683c9ba5671117095687fdc91bd4d3165d8ec7d776e9650a7202cb58cbc2476a3e120b9705fa19156a0239d8d106a9e52d9d582dac08301e28462318e9a8670268ad4eab83fccb9807acce8eaa0c0f9536cd3a1e8b439b70e54dacac7315364b0c160a66315ee1945a79fd4a45ea0b43117f99d3e10718362aa72c08971aeaf5a44fe487c0233dedbcb585b0b3c0fa95ac57a6c08f21", 0xe6, 0x2}], 0x10, &(0x7f0000001640)={[{}, {'/dev/rtc0\x00'}], [{@permit_directio}, {@appraise}, {@subj_type={'subj_type', 0x3d, ')]'}}, {@pcr={'pcr', 0x3d, 0x27}}, {@fowner_eq}, {@hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '/dev/rtc0\x00'}}, {@appraise}]}) syz_mount_image$ext4(&(0x7f0000001700)='ext3\x00', &(0x7f0000001740)='./bus\x00', 0x1, 0x4, &(0x7f0000001a00)=[{&(0x7f0000001780)="366d43d5ccd8f4630793266dda22ded22b4f900296bbc43ea48127a7acd3022f36c2da4596f6a93978de72f2d382de89a7037aba171700016ea305ad17ba875131685add681b74e9e6fda854d46112ecab9936ae925b6c5b16c767ed09b3e0b1eb43d64115b7f20cf1ab1a5b3914dfdad68ce5be54f78356176faa48f71b1eb5f567f4b5697eb688c61e50949d4763713ab2d579ea7f4e2a0d16934130db43f28dbe9f7cdf7fb35250ecd67640d00c3a49780c9614ca6c41b140d66af5", 0xbd, 0x80}, {&(0x7f0000001840)="409982482d2968e76badecffb271bad6d340257e4f18c60814076cc9ce3248a6bd52a449b7ff2a9f2a34ea69800f8eef0cb9adf771172767840901893c6ea7404e319f0b5b6528f90086f5410e38dae99b65624c311e88aa08948be8eb7a4fed2d49f87e3d5836975542cdc272637c9587ea5681f1f9d1efe1a4bad38c5d41fae369cbfc3434efdeb6db6c557eb7b45c96049adde9cde845991f6a1094f753f9e448f4ced9018899c549ed87e83e522dc04994ef7435300d", 0xb8, 0x6}, {&(0x7f0000001900)="ba01f659e3c7750a3f865dc801fef9b08393208afff7219b462c910f93e081821b9d7671302e7dea97ddac9fdc6a2278ab17bbfe1e7b80824f654308849798d9af3a518f5dec49802be3c13c215f5067204d9a1380927213742a7c2d86d39378d20dfde85186e632b1fdb85750518e5685937a0829fa6bc02535d68b902a103144063dafa1e14020f6b4bee9d5f8db7ad5d0b7aa441e03e8222ea00661d8232fd5b0c2701a50b9", 0xa7, 0xf09}, {&(0x7f00000019c0)="23e96837f3d9345fda10df54b6d92bedd61111639f2eef", 0x17}], 0x40010, &(0x7f0000001a80)={[{@bh}, {@nouid32}, {@minixdf}, {@grpjquota}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'hash'}}, {@uid_gt={'uid>', 0xee01}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000000) dup3(r5, r4, 0x0) readv(r5, 0x0, 0xfffffd53) 16:54:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120c01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 880.812867] erofs: read_super, device -> /dev/loop5 16:54:22 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xf) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 880.861591] erofs: options -> fault_injection=0x000000000000bd03,fowner>00000000000000000000, [ 880.910449] erofs: cannot find valid erofs superblock [ 880.935456] audit: type=1800 audit(1625849662.845:2885): pid=27377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15553 res=0 16:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de020000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120e01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 880.988991] erofs: read_super, device -> /dev/loop5 16:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de030000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 881.049189] erofs: options -> fault_injection=0x000000000000bd03,fowner>00000000000000000000, [ 881.061858] audit: type=1800 audit(1625849662.925:2886): pid=27381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15554 res=0 [ 881.107369] erofs: cannot find valid erofs superblock [ 881.125830] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120f01d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de040000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 881.151062] audit: type=1800 audit(1625849662.945:2887): pid=27386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15553 res=0 16:54:23 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbe03}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 881.222430] audit: type=1800 audit(1625849663.125:2888): pid=27381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15554 res=0 [ 881.281276] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 881.328661] audit: type=1800 audit(1625849663.125:2889): pid=27377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15553 res=0 [ 881.424479] erofs: read_super, device -> /dev/loop5 [ 881.429552] erofs: options -> fault_injection=0x000000000000be03,fowner>00000000000000000000, [ 881.467656] audit: type=1800 audit(1625849663.125:2890): pid=27377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15553 res=0 [ 881.488194] erofs: cannot find valid erofs superblock [ 881.570258] erofs: read_super, device -> /dev/loop5 [ 881.575451] erofs: options -> fault_injection=0x000000000000be03,fowner>00000000000000000000, [ 881.585153] erofs: cannot find valid erofs superblock 16:54:23 executing program 3: mlockall(0x1) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000991000/0x3000)=nil, 0x3000, 0x9) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:23 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) readv(r2, 0x0, 0x0) 16:54:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de050000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000121001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7fff}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9d7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x134, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68352af5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x179}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7290}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c02da1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcb9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b46ae19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x113a69e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf32}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61050c86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8355}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe163}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x450e25b8}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x390aabc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c64794a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c2763de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x345e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3914}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc38}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc72e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x861f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1924a748}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd53f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x441c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbff8}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004}, 0x24800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x240400c4}, 0x20000000) 16:54:23 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbf03}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 881.941627] erofs: read_super, device -> /dev/loop5 16:54:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de060000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000126001d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:23 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20040400) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000000) dup3(r4, r3, 0x0) fstat(r4, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000080)={0x34, 0x32, 0x1, 0x16, 0xa, 0x0, 0x3, 0x30, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) readv(r0, 0x0, 0x0) [ 881.968718] erofs: options -> fault_injection=0x000000000000bf03,fowner>00000000000000000000, [ 882.036535] erofs: cannot find valid erofs superblock 16:54:24 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xea26}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de070000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 882.077411] audit: type=1800 audit(1625849663.985:2891): pid=27454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15558 res=0 16:54:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="001b", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) [ 882.232547] audit: type=1800 audit(1625849664.135:2892): pid=27469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15558 res=0 [ 882.292214] erofs: read_super, device -> /dev/loop5 [ 882.328066] erofs: options -> fault_injection=0x000000000000ea26,fowner>00000000000000000000, [ 882.397888] erofs: cannot find valid erofs superblock [ 882.482101] erofs: read_super, device -> /dev/loop5 [ 882.492070] erofs: options -> fault_injection=0x000000000000ea26,fowner>00000000000000000000, [ 882.516780] erofs: cannot find valid erofs superblock 16:54:24 executing program 3: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000627000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x11) mlockall(0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120005d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:24 executing program 1: unshare(0x44020480) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) readv(r0, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 16:54:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x301, 0xffffffff, 0xfffffffe}, 0x14}}, 0x0) 16:54:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de080000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:24 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xedc0}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de090000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 883.001125] erofs: read_super, device -> /dev/loop5 [ 883.018593] erofs: options -> fault_injection=0x000000000000edc0,fowner>00000000000000000000, 16:54:24 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r2 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x8e, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="136ae20faa1a4e5697512ae070863180754f011e80ca835a6282e5f4ab76", 0x1e, 0x5}], 0x260000, &(0x7f00000001c0)={[{'('}, {'\x00'}, {}], [{@audit}, {@audit}, {@audit}, {@appraise_type}]}) r3 = openat(r2, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x0, 0x1a5, 0x9, 0x71c, 0x3}) 16:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001200ffd7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 883.065645] erofs: cannot find valid erofs superblock 16:54:25 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x111c02, 0x0) readv(r0, 0x0, 0x0) 16:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0a0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 883.145815] loop5 (27516) used greatest stack depth: 168 bytes left [ 883.163016] erofs: read_super, device -> /dev/loop5 [ 883.172579] erofs: options -> fault_injection=0x000000000000edc0,fowner>00000000000000000000, 16:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120002d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 883.236521] erofs: cannot find valid erofs superblock 16:54:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440a894}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100003000000fbdbdf250600000006000b00080000ec79a9d97265f22ba3c0107ebf0014000600fe80000000000000000000000000002308000400ffffffff14000500fe8000000000000000000000200000bb08000700e000000208000700ac1414aa0800081a0d3ef7880a95179f2afabf11898addcbb208496157f38e28edfba8e5619eacb976d8313190a54a171b966ce3f68c7bb2790a54708deab0f315d2cc6679b7105ee279defe78eb29c21e4d85ac8158f092355fafa9192f54fddb0b72918ab6bbdb950911ccbd2056d1e9a68a34010756587b75ee3a99cf18f41869aeb26ee30962589dae229f"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040050) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4563ccce632ab321}, 0x40) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0b0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) readv(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:54:25 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xff0f}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:25 executing program 3: mlockall(0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x6) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x2, 0x0, 0xa, 0x6) mbind(&(0x7f0000547000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x6, 0x7, 0x0) mlockall(0xf) 16:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120005d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0c0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) readv(r0, 0x0, 0x0) unshare(0x40000) unshare(0x40000) 16:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120008d7dff4de000000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 883.784491] erofs: read_super, device -> /dev/loop5 [ 883.804096] erofs: options -> fault_injection=0x000000000000ff0f,fowner>00000000000000000000, 16:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0e0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x300, 0x70bd2b, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x8041) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4eef}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xe99}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x72b}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) [ 883.856591] erofs: cannot find valid erofs superblock 16:54:25 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x620040, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) readv(r0, 0x0, 0x0) 16:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de020000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3ffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0f0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de030000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:25 executing program 1: unshare(0x400) unshare(0x8000000) unshare(0x20001000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x224000, 0x0) readv(r0, 0x0, 0x0) 16:54:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) [ 884.075813] erofs: read_super, device -> /dev/loop5 16:54:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de040000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 884.114107] erofs: options -> fault_injection=0x000000000003ffff,fowner>00000000000000000000, 16:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de100000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 884.179259] erofs: cannot find valid erofs superblock [ 884.197439] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 884.231114] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 884.267336] erofs: read_super, device -> /dev/loop5 [ 884.272405] erofs: options -> fault_injection=0x000000000003ffff,fowner>00000000000000000000, [ 884.298007] erofs: cannot find valid erofs superblock 16:54:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de060000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:26 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x26, 0x26, 0xd, 0x7, 0xb, 0x10001, 0x6, 0xb6}) readv(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000000) dup3(r3, r1, 0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) splice(r0, &(0x7f0000000040), r1, &(0x7f0000000080)=0x81, 0x2, 0x2) unshare(0x20080) 16:54:26 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de480000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:26 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:26 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x40000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de070000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de4c0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 884.669527] audit: type=1800 audit(1625849666.575:2893): pid=27643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14138 res=0 [ 884.699835] erofs: read_super, device -> /dev/loop5 [ 884.711407] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 884.739969] erofs: options -> fault_injection=0x0000000000040000,fowner>00000000000000000000, 16:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de600000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 884.782614] audit: type=1800 audit(1625849666.685:2894): pid=27651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14138 res=0 [ 884.810727] erofs: cannot find valid erofs superblock 16:54:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de080000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01033e1fead7f2ddd93fd640c74259b1000000ebf635e38d302e349cb500bdbc", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={0x460, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "57335acc7a3bf359ceea6f8e354f7bf0876e06a5"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5b, 0x3, "d2d4ef300100172f5f1c36af9723a38731de3e833c81badf0a1045cb89f682c9eb7282c79d873a1a9c4ba1eb378fda70b9ba11b59a4e6763e82a559f3d184555c6e1222479570655490029abb1792c98f155c41532bbf0"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x33, 0x3, "9f5502fd53b6aac05d819e7097418d09963ec9fda159802540e24f31696ef8d9021521200a345638eebfd4f30dba20"}, @TIPC_NLA_NODE_ID={0x51, 0x3, "591357ec96b140dbe459c1099ca38dff180bf0518a8d246f3431449bda3206aae810d29b49fc39716b5c8842fd0aeb835fccb7c2ba872387fd7c1592cd6fa6ac3bb2cda6011e06c3dad51ea929"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f5c8277f1eec35a4b2a961fab1d954ef8177ad1133dd26c5a860f5a6"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "26906a3bf605a9110e98112c476abd2ed5ba6dffa2faba67cc133f3e70922d"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e970d2672604bf0f4275f0518c933fd370206936"}}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a58572639b513f1c5a31fc55f3a461b0d1dee306856d4b3d20aa7c97d5954b34acbd7e"}}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80f8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6cd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7915c16c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r2) 16:54:26 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80100000000) creat(&(0x7f0000000040)='./bus\x00', 0x60) dup3(r1, r0, 0x0) listen(r1, 0x3) unshare(0x400) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, 0x0, 0x0) [ 884.907595] erofs: read_super, device -> /dev/loop5 [ 884.916148] erofs: options -> fault_injection=0x0000000000040000,fowner>00000000000000000000, 16:54:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0a0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 884.967682] erofs: cannot find valid erofs superblock 16:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de680000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030009400000ad00d181d73d7b285a50bfa314d738cc000000080006", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 16:54:26 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x1fffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 885.165430] erofs: read_super, device -> /dev/loop5 [ 885.179329] erofs: options -> fault_injection=0x00000000001fffff,fowner>00000000000000000000, [ 885.217580] erofs: cannot find valid erofs superblock [ 885.293936] erofs: read_super, device -> /dev/loop5 [ 885.299311] erofs: options -> fault_injection=0x00000000001fffff,fowner>00000000000000000000, [ 885.327831] erofs: cannot find valid erofs superblock 16:54:27 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x6) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x2) 16:54:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0c0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de6c0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:27 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) unshare(0x40040100) 16:54:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="314793d29b3d620599c9d51ef9f4315204126521303e5ad40daf7c0f2cc32bf59a60118fbbb45092d8fcb86700654e6e8e995d"], 0x1c}}, 0x0) 16:54:27 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x810000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de700000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:27 executing program 0: getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x36, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0e0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 885.692564] erofs: read_super, device -> /dev/loop5 [ 885.711038] erofs: options -> fault_injection=0x0000000000810000,fowner>00000000000000000000, [ 885.734636] erofs: cannot find valid erofs superblock [ 885.779756] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:27 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x1000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de740000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:27 executing program 1: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/bnep\x00') unshare(0x400) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x800, 0x400) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8, 0x426040) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000240)={0xa, 0x4}, 0xc) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r2, 0x1, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xdcf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) unshare(0x4020000) socket$inet_tcp(0x2, 0x1, 0x0) [ 885.934623] erofs: read_super, device -> /dev/loop5 [ 885.956082] erofs: options -> fault_injection=0x0000000001000000,fowner>00000000000000000000, [ 886.032338] erofs: cannot find valid erofs superblock [ 886.101403] erofs: read_super, device -> /dev/loop5 [ 886.108024] erofs: options -> fault_injection=0x0000000001000000,fowner>00000000000000000000, [ 886.117512] erofs: cannot find valid erofs superblock 16:54:28 executing program 3: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x1) 16:54:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '%%t\\%\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24040045) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f0000000480)={0x0, 0xffffffffffffff95, &(0x7f0000000400)={&(0x7f0000000540)={0x38, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x8, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x4044011) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="020000004e6eabec0af30a01dbbe5d8e18d22c93089cb92efbb8050b7c2c2e7e66575e90afd1daf47d25b25dd287f6684daa02e2f0214cb0d178eec1f0267e610c6f571b6fd6a7fc5aa4ba4c7eaa805862d37598825ca3af83a95759d5a0d2c7521f43417ae2fe5fb658a60cd7e077c0cd7c1e7ca47af347f517da8001f3bf09", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) 16:54:28 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x2000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0f0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de7a0000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x20140, 0x0) unshare(0x20000000) readv(r0, 0x0, 0x0) 16:54:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de860000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 1: ioctl$CHAR_RAW_IOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) unshare(0x700) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={0xffffffffffffffff, r3, 0x6}) readv(r0, 0x0, 0x0) [ 886.445182] erofs: read_super, device -> /dev/loop5 [ 886.458407] erofs: options -> fault_injection=0x0000000002000000,fowner>00000000000000000000, 16:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de100000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 3: mlockall(0x1) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10d902, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/pkcs7_test_key', 0x400000, 0x20) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000793000/0x4000)=nil, 0x4000}) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4def00000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 886.544217] erofs: cannot find valid erofs superblock 16:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de600000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x10, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 886.623844] erofs: read_super, device -> /dev/loop5 [ 886.643492] erofs: options -> fault_injection=0x0000000002000000,fowner>00000000000000000000, [ 886.687155] erofs: cannot find valid erofs superblock 16:54:28 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:28 executing program 1: unshare(0x2060000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) readv(r0, 0x0, 0x0) unshare(0x80) 16:54:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de1e0100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4def00000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de860200000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de620100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:28 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x100) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) [ 886.915659] erofs: read_super, device -> /dev/loop5 16:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 886.936603] erofs: options -> fault_injection=0x0000000003000000,fowner>00000000000000000000, [ 886.993181] erofs: cannot find valid erofs superblock [ 887.078357] erofs: read_super, device -> /dev/loop5 [ 887.085955] erofs: options -> fault_injection=0x0000000003000000,fowner>00000000000000000000, [ 887.150922] erofs: cannot find valid erofs superblock 16:54:29 executing program 3: mlockall(0x1) mlockall(0x4) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x5) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4dea80100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x0, 0x70bd2a, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6, r3}]}, 0x1c}}, 0x0) 16:54:29 executing program 1: unshare(0x50010d00) unshare(0xd00) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:29 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x4000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000700000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4deb80100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 887.605992] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:29 executing program 1: unshare(0x400) unshare(0x62000000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x10800) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) unshare(0x40000) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r1, 0x0) readv(r0, 0x0, 0x0) [ 887.657350] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 887.686243] erofs: read_super, device -> /dev/loop5 16:54:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000a00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 887.718676] erofs: options -> fault_injection=0x0000000004000000,fowner>00000000000000000000, 16:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de200200000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 887.778055] erofs: cannot find valid erofs superblock [ 887.798645] IPVS: ftp: loaded support on port[0] = 21 16:54:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000c00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 887.862105] kauditd_printk_skb: 2 callbacks suppressed [ 887.862116] audit: type=1800 audit(1625849669.765:2897): pid=27880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15955 res=0 [ 888.048112] audit: type=1800 audit(1625849669.955:2898): pid=27880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15955 res=0 16:54:30 executing program 3: mlockall(0x1) shmat(0x0, &(0x7f0000595000/0x2000)=nil, 0x2000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x7f, 0x6) 16:54:30 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x5000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4def60200000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x40800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000100000000000000000100000008000600", @ANYRES32, @ANYBLOB="a93a3f9170d1bdcaee12b2efe1b99af57e98b0901e8be3be96ca8fe9bd8bfe2fcc152a5151fa928533af2e004e2564de8781062c577e2f9926af2495e1b98dc36e56c2314b1b70e8d2f5c1629d45f09ee1329d3e0cba196d946cffc26e6afed6c643ad6af88c2efad5f2a7a849c3b097a0d44cd7f3abcda17166a959c26ec2abc563a178fdba5070ce1895ed1136a8c0a945e7c1f47703204a3f26d73f0826b527e9918b8cd06de3bba9486619d96c6285ba7e19967dff26dfa23d66992c6c17a3538c152a09b87364ef6775570f0bcd0ef7"], 0x1c}, 0x1, 0x0, 0x0, 0x4df78ec91726ca93}, 0x4001001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc091}, 0x48004) 16:54:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000e00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:30 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) unshare(0x2000300) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) readv(r4, 0x0, 0x0) 16:54:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4dec00e00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 888.669211] erofs: read_super, device -> /dev/loop5 16:54:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 888.691973] erofs: options -> fault_injection=0x0000000005000000,fowner>00000000000000000000, [ 888.712798] audit: type=1800 audit(1625849670.615:2899): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15981 res=0 [ 888.733132] erofs: cannot find valid erofs superblock 16:54:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x24}}, 0x40) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x100, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x4008081) 16:54:30 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x6000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000f00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de3a0300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 888.903273] audit: type=1800 audit(1625849670.815:2900): pid=27938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15981 res=0 [ 888.994293] erofs: read_super, device -> /dev/loop5 [ 889.029089] erofs: options -> fault_injection=0x0000000006000000,fowner>00000000000000000000, [ 889.093227] erofs: cannot find valid erofs superblock [ 889.159870] erofs: read_super, device -> /dev/loop5 [ 889.172563] erofs: options -> fault_injection=0x0000000006000000,fowner>00000000000000000000, [ 889.218221] erofs: cannot find valid erofs superblock 16:54:31 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x96083b935a0831f7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4004000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x40) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) 16:54:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de655800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:31 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x40500, 0x0) readv(r0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x36, 0x36, 0x11, 0x3, 0x4, 0x3, 0x1000004, 0x19}}) 16:54:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4deb60300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:31 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x7000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de006000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4def00300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:31 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x50b342, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) unshare(0x4000100) readv(r0, 0x0, 0x0) [ 889.799810] erofs: read_super, device -> /dev/loop5 [ 889.862774] erofs: options -> fault_injection=0x0000000007000000,fowner>00000000000000000000, [ 889.887015] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de586500000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 889.924026] erofs: cannot find valid erofs superblock 16:54:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4def10300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:31 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x60) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x2) sendfile(r1, r2, 0x0, 0x100000000) dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) readv(r3, 0x0, 0x0) [ 890.017693] erofs: read_super, device -> /dev/loop5 [ 890.040855] erofs: options -> fault_injection=0x0000000007000000,fowner>00000000000000000000, [ 890.058192] audit: type=1800 audit(1625849671.965:2901): pid=28019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14119 res=0 [ 890.076111] erofs: cannot find valid erofs superblock [ 890.181295] audit: type=1800 audit(1625849672.085:2902): pid=28019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14119 res=0 16:54:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de008100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 16:54:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4def40300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:32 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:32 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}}, 0x800) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:32 executing program 1: unshare(0x400) unshare(0x10020000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) unshare(0x10400) [ 890.883235] erofs: read_super, device -> /dev/loop5 16:54:32 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x100, 0x9, &(0x7f00000016c0)=[{&(0x7f00000001c0)="98c9d978235f93fa1f0cfac09c18b0c3ddf48ca4a2d809e41a287bf3046442120aa2d7f0c4c7d468bfe38c4dd5e6f131ae57e1fce37e64daa681044199e3bd7026f0da3cc6d073b85bb1341bb85a2eade93291bc12054f0f459e44df30f8286ef14dcbbbdc4f8f2341a4e3881442e802e0703990e6b4993ddbaabcf46ee4b55b23cfc1ecee8a9e3a09a019763435d0e8c82392ed0236fb7f78b0f7fd452a55687db8302b0fb2caba568aebbabf70198e23d3c1547a0332bf2d405660bd9d39999b011e14d3ac134505d90cae68", 0xcd, 0xfff}, {&(0x7f00000002c0)="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", 0xff, 0x100}, {&(0x7f00000003c0)="7ddaa62247c958ede13c3312baa07b135d8c1f368c4a0f4ab4b1e59f07106fa7eab252270eef7260c09d8f9cce68192a7b11c127ec57f95d1a76ac34f7b5d808caf0cf89c90e5922ae2879d0c70251", 0x4f, 0x2}, {&(0x7f0000000440)="760eb768c32d9f112903696e7b0bc1d3b83400d764df543efb7a50bf552b0192d9795e85ba21b82f8d994ac5c12ce9f785f7bd33d9b0e3c81911a14320ae16fdd7d0e697d8deef28b6297d235ee2bea53b1c66c86b7af73399de55106b7068514fc6e27399af91feff9cc4b0b03b6e2a5fc3562330fd8ae5917c26f11943a1b2940832e03c484984d7b9e5583767a7f2931c6a29fbdaae782239c015eb831ef6768e1aad0be8f4c7f3c5b8340d2c0b9c373675c95c28ba96dc3f3745fe380f4a", 0xc0, 0x6}, {&(0x7f0000000500)="00cad17bda444f629bfdda040a3bd159", 0x10, 0x8}, {&(0x7f0000000540)="7c89f2a51feedde6fc8b0552c31612df3cbf040d", 0x14, 0x4}, {&(0x7f0000000580)="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", 0x1000, 0x8}, {&(0x7f0000001580)="64c50c36a6ad4acefee85b6ad2455485269d67177bbd89a2d11fa363b3173bbbe87b87a7628b8ce7b080fd42265e2458a52a22a8646721fb29b8c29b0f24ac3f383d5c567331762c4d5366cf2118fdc75003e8dea5a2ef7704511d578330b34f0976bade4d3cbf7e4a346cc046c0c6072f642f595f27ec05b690ea0144e7690c18b6e9d072107844bd7727e25df822bc371d9c158fc61db46c53c7790e95bee764d25e22150c2f14bb97afcd8cfb666b89e19f96e10b2f6de3de1f34538a2e9b0257968910d21641a221f39a5ed7bf64cb54b89146224ab5f708380f8e2c1fe8d97745b5354aad7ce932437369f10e18871c25add5", 0xf5, 0xffffffffffffff1e}, {&(0x7f0000001680)="0d1ce915e3b32e4cc58c949a0c59", 0xe, 0x3}], 0x48800, &(0x7f0000000040)=ANY=[@ANYBLOB="687567653d6e657665722c687567653d6e657665858ddc0f67653d77697468696e5f73697a652c687567653d616c776179732c7375624a5f757365723d2f6465762f72746330002c646f6e745f6d6561737572652c00ade217e5269c3ebb5e1b091e40"]) fsetxattr$security_capability(r1, &(0x7f0000001840), &(0x7f0000001880)=@v1={0x1000000, [{0x6, 0x5}]}, 0xc, 0x1) readv(r0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000)) [ 890.903391] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 890.910949] erofs: options -> fault_injection=0x0000000008000000,fowner>00000000000000000000, 16:54:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de028600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000500000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 890.947850] erofs: cannot find valid erofs superblock [ 890.965233] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20040080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004054}, 0x4c011) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r1, 0x301}, 0x14}}, 0x0) 16:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:33 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) gettid() r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x105082, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x0, 0xffffffff}]) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x20, 0x1e, 0x17, 0x9, 0x1, 0xffff, 0x4, 0xf9}}) readv(r0, 0x0, 0x0) 16:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0ec000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:33 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x20000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 891.145426] audit: type=1800 audit(1625849673.055:2903): pid=28083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14189 res=0 [ 891.182970] erofs: read_super, device -> /dev/loop5 16:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000700000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00f000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 891.194469] erofs: options -> fault_injection=0x0000000020000000,fowner>00000000000000000000, [ 891.220395] audit: type=1800 audit(1625849673.085:2904): pid=28085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14189 res=0 [ 891.278273] erofs: cannot find valid erofs superblock [ 891.381721] erofs: read_super, device -> /dev/loop5 [ 891.394685] erofs: options -> fault_injection=0x0000000020000000,fowner>00000000000000000000, [ 891.422709] erofs: cannot find valid erofs superblock 16:54:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYRES64=r0], 0x1c}}, 0x1) 16:54:33 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0xc020900) readv(r0, 0x0, 0x0) 16:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00ff00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000900000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:33 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x9, 0x2) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$perf(&(0x7f0000502000/0x4000)=nil, 0x4000, 0x3000004, 0x100010, r0, 0x200000000000000) 16:54:33 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3f000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de004003000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 891.888384] erofs: read_super, device -> /dev/loop5 16:54:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf25120000000c0006000300000000000000050013e20000000005001300000000000c00060003000000030000000500060092eb0493601a0d65"], 0x48}, 0x1, 0x0, 0x0, 0x4044044}, 0x800) 16:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000a00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 891.922824] erofs: options -> fault_injection=0x000000003f000000,fowner>00000000000000000000, 16:54:33 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x72020e00) readv(r0, 0x0, 0x0) [ 891.980969] erofs: cannot find valid erofs superblock 16:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000340000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000b00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 892.013272] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 892.045971] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:34 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2cc100, 0x0) readv(r0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80000) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) fchdir(r1) unshare(0x8040000) 16:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4defffff0000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 892.098684] erofs: read_super, device -> /dev/loop5 [ 892.117656] erofs: options -> fault_injection=0x000000003f000000,fowner>00000000000000000000, 16:54:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000c00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 892.164485] erofs: cannot find valid erofs superblock [ 892.253866] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 892.275528] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:34 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) ioctl$RTC_AIE_OFF(r2, 0x7002) unshare(0x100) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000000) dup3(r5, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x40, 0xee, 0x0, 0x0, 0x9, 0x200, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x89a8, 0x0, @perf_bp={&(0x7f0000000040)}, 0x2030, 0x0, 0x81, 0x8, 0x70c0, 0x1, 0x1, 0x0, 0x10001, 0x0, 0x2}, r3, 0xe, r5, 0x1) unshare(0x24000500) readv(r0, 0x0, 0x0) 16:54:34 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x60000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000010000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000e00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x2000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8048080}, 0x0) 16:54:34 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f00003f3000/0x3000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000140)=ANY=[@ANYRES32=0x0]}) mlockall(0x1) mremap(&(0x7f00004ca000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f000072f000/0x2000)=nil) sigaltstack(&(0x7f00009b9000/0x2000)=nil, 0x0) mlockall(0x4) mlockall(0x3) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f000088c000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0xfffffffffffffffb, 0x7, 0x1) mlockall(0x5) [ 892.620335] erofs: read_super, device -> /dev/loop5 [ 892.627756] erofs: options -> fault_injection=0x0000000060000000,fowner>00000000000000000000, [ 892.644028] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000020000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 892.668877] erofs: cannot find valid erofs superblock 16:54:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000f00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000030000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 892.708053] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 892.724275] audit: type=1800 audit(1625849674.635:2905): pid=28216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=13973 res=0 16:54:34 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4dee10f00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 892.828478] erofs: read_super, device -> /dev/loop5 [ 892.839475] erofs: options -> fault_injection=0x0000000060000000,fowner>00000000000000000000, 16:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000040000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 892.895515] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 892.898920] erofs: cannot find valid erofs superblock [ 893.008486] audit: type=1800 audit(1625849674.915:2906): pid=28216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=13973 res=0 [ 893.064814] audit: type=1800 audit(1625849674.975:2907): pid=28231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=13973 res=0 16:54:35 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) socket(0x4, 0xa, 0x8000) 16:54:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de011e00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:35 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x83030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000060000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xac, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f8ea1acd470d3ac4ad31780b4d10c7a2eb4455b00e529a8ec69651c41cd8cd40"}]}, @NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a9e8176b7720c9b2cd0a097c268186bbaa69151a8cfaf03b0dec3d5a637d63d9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9862c5df1b99b14cb4ec9cbfedb2c998"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "14551db64991214add13becfb3ec26c3"}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 893.224224] erofs: read_super, device -> /dev/loop5 [ 893.246133] erofs: options -> fault_injection=0x0000000083030000,fowner>00000000000000000000, [ 893.312082] erofs: cannot find valid erofs superblock [ 893.401313] erofs: read_super, device -> /dev/loop5 [ 893.406873] erofs: options -> fault_injection=0x0000000083030000,fowner>00000000000000000000, [ 893.429362] erofs: cannot find valid erofs superblock 16:54:35 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000000) dup3(r3, r1, 0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000000)="d383dca2cc4f5790b3df3afc472aa7315fb664a0fdc6f8d39c69b2264915ee1088032681f2f1e865476e0131e9069490e0040a666feaad908205853494fd3c9760c2d34112"}, 0x20) 16:54:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000070000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de022000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:35 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x84030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="010300ed0000e4e6ffff0000349f08000600b2a7c0a7dc6a4950139556a6f1c66a00000080000000006d0500e0cc0d90d27ad293267d441bf2b477e3c66a6309f3e276b28fb700800000000000007b050c68", @ANYRES32=r1, @ANYBLOB="06f27f660b7b00ebfffa9a0c6158dbbd3c3172f703f0f002cdb60a42c20dd08ba4fa1c71a9a51a842d73a90e303d75d4988b2e3593b944ed3d2106020000ff400500000095d300662e339b41bb320d7b7f6b78fdfdc9af427e3e"], 0x1c}}, 0x200008c0) 16:54:36 executing program 3: mlockall(0x1) mlockall(0x5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x0) mlockall(0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 894.065750] audit: type=1800 audit(1625849675.975:2908): pid=28278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14202 res=0 16:54:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000080000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 894.129208] erofs: read_super, device -> /dev/loop5 16:54:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de033a00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 894.151025] erofs: options -> fault_injection=0x0000000084030000,fowner>00000000000000000000, 16:54:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000015", @ANYRES16=r2, @ANYBLOB="00042abd7000fcdbdf250400000008000c0000000000080008007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x40000d0}, 0x44010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 894.218957] erofs: cannot find valid erofs superblock 16:54:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000a0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:36 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x4000000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040)) readv(r1, 0x0, 0xa) ioctl$RTC_UIE_OFF(r0, 0x7004) 16:54:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de004800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 894.312705] erofs: read_super, device -> /dev/loop5 [ 894.318012] erofs: options -> fault_injection=0x0000000084030000,fowner>00000000000000000000, 16:54:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000c0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 894.391572] erofs: cannot find valid erofs superblock 16:54:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de004c00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:36 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) unshare(0x10020000) 16:54:36 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x85030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000e0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 894.576985] erofs: read_super, device -> /dev/loop5 [ 894.592303] erofs: options -> fault_injection=0x0000000085030000,fowner>00000000000000000000, [ 894.629472] erofs: cannot find valid erofs superblock [ 894.713206] erofs: read_super, device -> /dev/loop5 [ 894.719463] erofs: options -> fault_injection=0x0000000085030000,fowner>00000000000000000000, [ 894.748589] erofs: cannot find valid erofs superblock 16:54:37 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x1, 0x5, 0x9, 0x10, 0xb, 0x0, 0x0, 0x8a}}) readv(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/146, 0x92}], 0x5, 0x101, 0x1) 16:54:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de655800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000f0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x8000) 16:54:37 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x88030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:37 executing program 3: getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000340)='./file2\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [{}, {}, {0x2, 0x6, r1}], {0x4, 0x4}, [], {0x10, 0xe}}, 0x3c, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x6}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1, r0}, {0x2, 0x4, r1}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x3}, [{0x8, 0xd, r2}, {0x8, 0x3, 0xee01}, {0x8, 0x1, r3}, {0x8, 0x4, r4}, {0x8, 0x4, 0xee00}], {0x10, 0x7}, {0x20, 0x5}}, 0x6c, 0x2) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x1) socketpair(0x2c, 0x4, 0x1000, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x20110, r5, 0xa03a1000) 16:54:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000100000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de006000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 895.349152] validate_nla: 5 callbacks suppressed [ 895.349162] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 895.370255] erofs: read_super, device -> /dev/loop5 16:54:37 executing program 1: prlimit64(0x0, 0xa, &(0x7f0000000080)={0x5, 0x7d}, &(0x7f0000000580)) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x183001, 0x0) readv(r0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x111) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x5, &(0x7f0000000c40)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000340)="59868c53d9e1bbc1425e47e22efa917bf444133863620370dd7437db49a0a773f0020ea880302b79468d86694de23a7e6819e39551794751586de41f24ee1cef959686c7511d591740686af6f895ee44e62a9c527c005bdc3b2f902fb1821a40541f5c06583e07ddf6a70105b08aad599a15d3e8911a33747c199138cd3c5bf9a497dd21503f9e339bd2d50e534ee8bc3db5d111b4a0b2989b1e6c65106fb00c79c79ed89702d5ded70642ed9ba26beb1f1dda097fb8589b5190a12feb7f3771dac478fb5ee86c0b187c6247a8985e962785ae8326", 0xd5, 0x200, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="920d5bccd80a4c8f72b1ba594d471ed4d822809b62d89f4c87958aca8540a8ca89215e1d023efb036095f737b8429022380948a0b0e9748ee2b23687801a4ac3c3660d3744fb73cdbd2d3e494c9a618997c54a015b0e0e9e925be070b7c8d252e1bd5648298700cbdb52fb2fd63c42d450550276aea08ebe3d20f25b991347343d7b1e618895d8df77f150408942a95d042da5e301ab98fa5d5452cf451895ce7ff5783160d7696f933257723cfea9aeee9a2abb1e6eee5987f7eb1566ee169a527f2e5da6823ae3ccf1ed21f093a79ddf75199daf932fb048", 0xd9, 0x6}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x20, 0xffffffffffffffff, &(0x7f0000000980)="daf405fe2ee537ea91ac00a52089c4374a0f6556e36ed738d2762eaab942cac0500ab6c6ee40e981554f851dccd8645f49cabdf56c11a39e4624526951f8e08907fe1b97d485bc95521d87fda7128f1eeacb8d2d25435f8e4621475308b524b7888b0951e5df5558908bd1e49fd8acca7c047f7701d42380ac4d871039216983ef4919c91a3edd2e0de392ba4fc0207e4a4d1bf13a4b9fd55929307d17bba71dbd430b615a11590c986587cf0c60422db7076b0d51df43f6ecaf65ad4f10cc418cc3137cca2d3d7cffc2d1f8c82c95f4340dbf85da2fdeb15115240ea042f9c40b53a3ac8491bc153f83c9", 0xeb, 0xc6, 0x0, 0x2, r2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)="42f8f3a09a4ff0a92a087ddcb1923bbf53c507f4f24283d949763e58d8b86babdbf6796953fb49c858566086fb18d442d0635c914e7053d612b8b391d14b771437b67a4b0a83506825ff7ce3abc81f0f336a20587a7e2947b2ff0bfa6aa202faec7d08e76c2f70cb8474b8b4fa9decb504a05ce1372917cb8a70b32d229a20d8fc9101e5b03b4ae183de1c42621cca2451f4b0940b808ab8f73ef83490e1fceea99c0d52ed620e5d949e1b261a76582e390d76d9484d5ba73e9a8002f86e0f", 0xbf, 0x1, 0x0, 0x2}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000bc0)="7403b60814d3999a0418a29795255fd5479648c08776a860bddbf1e58bfb4d59f8341c4e03ee168ab295b2ed", 0x2c, 0x27, 0x0, 0x1, r3}]) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) io_submit(0x0, 0x3, &(0x7f00000006c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0xd6, r0, &(0x7f0000000480)="a2f6859e948e3f54c140c44cfc5edee50e90321979226224f6469771c55efcef55f997785870e6c97999fda6da26ae8d3ba8b69cca8322688ef9880066b8eb730347dc48c5b6cb066310b21e440f9e070f354cfdbe9b79181fa6b30a0882f2790f6e5e757dc1a49a4623a540651a2c7177b6742f331c07832e63f90564d89b32f9cc3b49057839769fe99c9ce393e6106d5608781ad0", 0x96, 0x3ff, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000c80)="5fb8002c91bba1b88fe907c925808d9ea645e8bdb7818f68f015e30668737b8df2a910c63e410952b599853838cdff2864bbbf826b4eab05b2e1b4e96a83c6dea2d78cce29d5e859210c7c31b8a4049dae9500ea3b927641774af9011c6bee98174f3259bacb5308294cf8434016e1900a524fc83421088d74817304f479b2fb9d9014f5fda42f5e4231461351b1fc5d25c0d57ac29128b39bb3ef51900f0072f5e299bae94accea52abe9325175594da5c7f4a4016f632f690c79881f8f72d4760654d51a919c134eeb2b793d615bf9eb218f8554b250c1d83572525db526b8d2601da8a791f268b7549d9484b87025b2fd18190eb5380bf9967f3d344401cf6c52227707abcb75032db85cc9dfbf62b4161ae8981be1e8857b88eb4e38a591846c6d7dbf925e2cb7d8235d420ac00c8c4d937142969c7904df3508361c9224ae1d000672d9acb842aa519e12c7d20d3d090ba6be08d948f46a00e300d5fdc72e17dc583097e9f136e6849b9392120248b465bb1f3fd1a0eb0250fd63b729e0750df1b58e431a2713bb7918b4c62adaa000d32361249ceb110ec7e909d64f90eb651496ba87dd25117998fee1c32979945707900081bb92484f9a3e2be8eeb2be8c906e3eff153d551899b431d62b3d57986ee2cea29202cb3a5e2fc01aaa20b0b728f29507d195d1763d8288a9b2e4534c793c4e5b9cfaeaa9cdac03e22eede657985e3cb3f59d262607f6f3a87335ec73d550db00b1304e9e60b2280429c5daed8db9d235b8c57b6c8bf54256b1bf62ddfbd9f0332d6b67c66f3ccfc8e01353758ba55b79e6882aeab8e4c819520938c06cf7d6304ddc19a9a999cf1a4431c53d369c6260c16931fb3326638d74a30c17d493dabfffda071aeded0f0e1f05ab597ba3fd29918739713b88cb62e08e9c358f5d043949cd09c8a5e39b7ba5ccb12ccffdf8497ebdf78e407f8d0e74fe25eb4f502931c855700b7bb56ad05b40c8c7b1c15b5489e5de4092da550c78f8040d54c58f468d8abfc81d8d2de3d1c9cd6c8d6c87fe00d534124db0e0bd78d0e18631eb84beba6c48c1c8ce91881ca7c6ed0663861b46efa6d4dc1e225c30d3b4dbfc9ace9fe25faa9fae2786667ce93b4049f0e27714001b79189e1383fe15e66972e26c22f690faeebfe8aa680f83207f86a36be39be5bf055af4f540ed93116c8f995b9385e01ea928ec29c9e8be5b5a3773a3a1a65009d20572798f7cf948e026ceb7434846e4b9e7825e091ef90f7995932638ecb7b22a782ff8cf1aac533fcbbd399aa395666e7a72a55d878eab9c3b0137b1f28c785b66b7ab6e88e3d6bdd38d05d2927227f87140558ad5a216014480e71322ff3cf4a60e477dd2a4f52d83d1002df575e82f3ef6927fecee05f6c3e308aa6ea04638e0d15458bd71caa190ee9123e912e3fbfb5787304d6335f61dec7262e4cbe5e1bfaa91bb01b1ffce7e07e442ad8e3e40120706100eee6045493a99e4dd38774454dffdb2a4d482aa231892757ae03a7aa9d9b8bda4aecc0e5c08e93db8c707377047925d4c63cf9abcd5ff08dd868e8db15dd7232ed3eba9cbcb4d5131ab0626a01c959cfed43130ab137454d1f4ef69852e77a35456e7d599f8046f08c4b370af29d910c980d70b5285c753a3537d226748f7d9e36e21dee526372022cd801f53428bf766c04e18931132858d0c3521f436d1f0a04d210c5935eec63bc36d5b1ed5cdca2de1baeb951e3fe7ed2a1929e2b61d67827efe70d180fb92b42ee723b70959730d88239454c81d52787868eb1c7c4cf9256f9e999f88380fe0e1a0237b8966fc2f724f8547461d3bb754d66196297bedfcca79b18fd95b6e288ccfd11b67137f0813fcb50bd981276f9c0194d282c3cf7b72411017aa17934baef2882b8a96318e8634fef9e0c7a3aa0089d00502cfaf051351d6fd43f045f8835a6aabd4ba07f7e3aee8439a6b30b1db4ab44d268212863a157b208e8a8855ed6e070798b275b93ac05ab7061bfa0003b372595a91e894ea005daebe6862386259d7175c88e56cf4dbb17840babc004176a90b7c0c74b5c21b868c37b3d8d697de3b936ec54de9e82d47db1179370d1f7d55dd7ddfecc43d5a4f7fbb562c9ea0549158da853813d5bdc92e0b1a9e281b9d61965c67e101b9255e968c790fdef0d3cfa2c7ead4dcfb2c7127a45acb8108da1164d1133b9f457493052e59403af3497d6fdea64d91f1f8fc82900650e310bb0dc8aee7006d0e0abf981484f0c8b5d5e26626db80404613d1ffa8ce01a52fa9eee0b2bbe394c37d51eb6c42ab6f90e2487a97bed16004e1cfdde1869ed336c46d72b2e5c8f55728f823dd7f496829209e934bd826e609e53893b3040469906817e0c056562385491d63a044d3c2073b24b9ebb7de4c6484bc32adc746e9c7ef0a35ee7fb6b8589da67cc592eb67066716c5a1190a49e7f3c799008c85ccc50064690a1119a4d1bdc740df8181fbc0902d7fb78ea86c9b48add4460ffa801bc3bcd950b368a735b4a2f0652b3d6ba93af1a42154cea150d1b870c812071b1412c80574b78a22fd0886a6156b958fef64f9e7319b411d59310ab24516476a541d2b338d4529cc8f61c97c7d22bb7fcb3472162121f48991a25f88b566fc6831a1f15eb22000f0dfe0b25937b7afe24653257746aeea56e448c49808a8faff45f17872f585ba9bd9b671a93950ae2aa208e0d58532eddcf20c34d2a405eee56abef221561a54992719fce3aa474fb25b1993a276f1e4dd588443fe2a44efd44bd74027899abcf19d3a820023f2bfca43329bdfeff676996740e140e8f643c7b2bab53d47b3a0455e6213562489e1733bcd08fd1b80ca54652b75ce5bd98185af32e98710a022936df8f66c3da9485cd9f3da186235205d82e62ce3aa222c7fe152466db0960990bdd75eef24a1e89efa4fa636cac1a1725045e3971f4c78b50d444277c61d5f7f78a8b0c60871b4e7bfe57606b9c659fe8a5990d4971c4ad61d2ccacf7d0223aeaef039ec01c544ed3c0043b84987fdfc1d500757b40338b8bd58b7f68b824e30ca784df3f149e3ee48c36156194317ac93d53801b08a33bfe6b0d08ebc86a0fbe7b1a5485695cda4bb4c2419fcd75b9aacf818a4b1abed7e5c4afa465d5a86a85aaa6fb041d5b37fb69452d8e55afbc1d36d186486c1c6f68eb1a44ec4b8ebcdc26063bfbf315e6ce8514e01156e9aa92a97f5c75a29f271db53adc95371a4509d828f15132e9c89c0d4ecd43fefec86182a2aa43384920f4ce428c99718ee78fa2863f275968a32e6f817e787badff08384705e7ca96ead9f5eb8b147e46672301885c219a14839453ac3f9056f8afbc7257df6d503f1d0aa7bbfc6b9226d8eb32c49f600d487f4110ed1ec234ca47380666002fe09e158000405b770d3aafb04a3f71dc24a92271cb63fe892cda0a761d42a920938b3370b74f6ef9c430fa60d5d52b6246b09fef359c6f1b0b10f319e46395aae53fdfe45acaad739fcc83a7a5f52505c608e33d182c241f547b06bf01e4278583bd5f9702f07475da0f5d577441651b434eb69fe6f862a80b195dedaf73308c4ae17c92ada72a51b6907c2c3277aa00faadc4e8b6ff524bb384ffcd4e180b95a0203e76100fb756ffbe08ac19a2a4d97f24ed642e8c318bf0eb256b9dc694be8b95e3ded9c365f9b28003e5297da95e85d1da97ba85bd3311138cb9ea5e6e09c9b26f86c2ec2d4992702f7f3be92ba9f1d60cbc3859321fcda7fef75df10f3182c536946587c81832ddc614ade5685a4e6a7dba8a63ad0791246fb40e73b166a3b009f6c5f2d0505f24c184f119a3304be20721d827ab0b5f54199009e32e9d26e42262bbe2844f4d35fbd21d8323b20f3413afe8965f35f37f9e58b82b7075394184b8b88794dc343787be33e1134c13c2a1dbcd285208b744c89abaf45c6dbe8f3d219cefd42b020ad7c907f3f8a9e9152d2154ff36e7d7704b4badbcb2c4cfc29399885b5527e42e0a9a64491c18e0d81b97cb4d9e1cf6bbcb3f8d9ffb10f5de8dd87e73687d1abdc75b71d9b287c4725468e3c9d4bce35d22ad6485f35bedacff8fc2972af45d562d64e2dbbf90f3825e6cc590301c386ae1b221e63c53f322dacafec4e2b3aeb537a17d8d2858aa35f3a615e40033c631d60e5bb3dd22e1294473a605782b4df847713c6aa54b8b37545da2f58327590ed143dcc087036f58ecaeedd4934d22284f4c6499432be5a635335fcab4c909847df2481da3044014c413e0441d5c70932fd89829f7a51e6bc3502ca710b1a63eada4f0dd01b6d75733592b3c122649a1b5ae7fd666932e5e7e72bdfc0adf3c0524cc2cadaedde9c90987ebf262d6b45b27f140d2b278dda30fbbb5ac6aa9a2fadd1c8e9bdeafd6306f2e883fb3782c54033f80e2bb3e5fbc6e74c0d11b7396689b66cea265fd79410502101e2b9b5d6f7955150e96edf9b285a68f24d2de894d137b7cfe616fb122087e7c8ce73fca41170b54c6cfab88d08709573050d3aed410d568124ba3fe8e04cd797bddb2c3ca170f7c05125304cbc0fef96348894edab231dfaa646f0deabe2749c04f25a7888e1d2cf87a88e96c1525082fe450e5111f9d4d73dad5f12c3a9abb17e2e796df992bd7b067e17ecddf4e779d4bae70d0472e5c4990ab6528628942fd077fe677c39ecea40d4d98de891b80c637618a6341cf819e739d8740c12a65324b581537d7324f505fae11fd68e21e3b38564642b3d01cc157fbca626bb8434a88aed13aa900fda1d7e262781c3c56ea487acce4febe33dd5079bd9cddfb54a50c2d8e6e21936ac74c4f12966259f156f5f31ba8ab2701d7d356a09d4c1df1d44cc6fc93e787b499075237dcc9c3bc1aa9edeb957094ab4fe7b57a06b8f57cbfad6b81662f82af2a9a101642f6f8975e38b11fe6678b956f510ffff45b9386145795df6c3f951d9f4b67e15c5783b789ec7790993aa003595c6dabc43713f9ead393062cb29d2a65cc850be4d2507ebb5ba9297cddf4dfb4e3591ab3317543ffc889a6c8518398f1951bd2c986057ed624607ec7bb906f45b77ca6858d66f014135999c9afb668c4ca6933bc8410f51a0b54dc832a2f5ff264afc2d61149362b97a8e9762b4bfa146676578db2986f540c3eed7edfa9ee0f58af39a5d137686900821c82936e94aa708ec82c1f8bf76f844822a33a5e3109a526081c2e5e5c542dba5e3399fc09c450a109b048f1ca6c8dffc1d9a066138338ed92a70b42037f82c641fec50187568e4761e88b79d6983333d42cdcfe35052803512b550706b2e99610893b8c8a2c5d5ab285aadab868f2e0e2f2d7bc838eff0c99f9cac410aec9a6b8a7a49f76c304d54e32cd8e445ace726726f22aaf7619cb0310b24bdc5c7e1f63408c49f9e207e824dba23ae88c790754590a213dfd6092f690e0dfd5be0bdbe8fcd4e898d9ce90d8cbba8586e465087aa966fd2a439abb856e573f38e801a22475af01dfc7e3d36da21498e671da1889309487858abfcb9eca17059576d3e2a6a11d9e4dfb5cf18db2c1520dafda8ae56e42150d183807cf995674ce42b7997009e579be90b7b723610e4c9984ba740d0203b6bd51c01b0375689c4c430b5f2a6aeaae07fb75ab55aed3522c5bea5fbb30bd08dee7d03bd44fe3d02ed2b5b1a205b047b571543aa9c385465e0cb6053ecbb03d546d730de7fea3acbef53fff74ca8a9c459ae136d953bd76deba8cb54c394c4fef5e888eebf7283a3de1b65fe896b9a14", 0x1000, 0x9, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000640)="96541ef4e14a85", 0x7, 0xa330, 0x0, 0x5}]) sendfile(r2, r4, 0x0, 0x100000000) r5 = dup3(r2, r2, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)=""/165, 0xa5}], 0x2, 0x7fff, 0x2) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) sendfile(r4, r6, &(0x7f00000002c0)=0x26d3, 0xb5) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) [ 895.408971] erofs: options -> fault_injection=0x0000000088030000,fowner>00000000000000000000, [ 895.447348] erofs: cannot find valid erofs superblock 16:54:37 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8cffffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000600000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de016200000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:37 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0xaf) readv(r0, 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) tee(r1, r0, 0x4, 0x5) unshare(0x8000000) [ 895.640816] erofs: read_super, device -> /dev/loop5 16:54:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de586500000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000058650000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000810000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 895.697474] erofs: options -> fault_injection=0x000000008cffffff,fowner>00000000000000000000, [ 895.734208] erofs: cannot find valid erofs superblock 16:54:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x50}}, 0x40) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r8, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c00060001000000010000000c00060001000000010000000c000600010000000100000008000300e804cebf1d066e60ecf506b6b53da5b11ece1dcf440121dd33c431759326795513437d01c96c7b3b2772baf70d4038e4ca32775f7fbe518d8b4ea2594e17565cbd6b035fce62d1c91cff7156b91da236c72af890dd8a8004d89a89b3dfc9337ac5c2780623e237d7718c9115439e35ed27772b47484d902d18891dc3dfd64eeb01cfd641e5a9870d913a0224c27cf04b194bd3ae4929f9b971fb22f99cc4455d1a1d0314ff8f2393b4c25a3bbde5c4810fc7593954292c6e4ed8a764", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x50, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x5) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r11, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 895.815112] erofs: read_super, device -> /dev/loop5 [ 895.825804] erofs: options -> fault_injection=0x000000008cffffff,fowner>00000000000000000000, [ 895.867582] erofs: cannot find valid erofs superblock [ 895.937765] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 896.015317] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:38 executing program 1: unshare(0x400) unshare(0x40000400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de006800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000002860000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:38 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb5030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:38 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '+%\''}, {0x20, ']'}, {0x20, '[:}{*&'}, {0x20, ',:['}], 0xa, "297e53980eb355e533b5195539dff8f43a86fe16af85bd8b703476fbf35069f6529dea30bb9c2ed704aa892eba1817aa9b6b1833a0375b55498801e31b4fe6fa6bd6983a8fd2554a9d41afea61a6570cccf456517d6074b6998f8d07520bde7d5421acb069d5fa5b17a49a874ce409ec71de2288513fc6c8d232025c70014a5c1e5f6d92abb602f4b88fa3d3ca35417cb0fd55cf89e9cd4f8b986e0a19e8df4f66cb7e7a814ab3c4857687a7c34e327b97d305ea431122a157b169f9ce1aa571"}, 0xdc) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x6) 16:54:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16:54:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de006c00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 896.490235] erofs: read_super, device -> /dev/loop5 16:54:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4deffffa8880000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 896.515681] erofs: options -> fault_injection=0x00000000b5030000,fowner>00000000000000000000, [ 896.539181] IPVS: ftp: loaded support on port[0] = 21 [ 896.573695] erofs: cannot find valid erofs superblock 16:54:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de007000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 896.659797] erofs: read_super, device -> /dev/loop5 [ 896.673174] erofs: options -> fault_injection=0x00000000b5030000,fowner>00000000000000000000, 16:54:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4deffffff9e0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:38 executing program 0: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010301000000fddbdf250100000008000600d2b19d73b0e449e3dc3440cecafe3c07fa8e250acbbae5474c6166f22f3c00462f1bf8164588c809e4f6fd3cf971c56aac422c794c26dbc13ac409ff019fcb5a9d97721e79625463f642a39ec53049f5113d5af83d", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x8840) [ 896.708060] erofs: cannot find valid erofs superblock 16:54:38 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb6030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:38 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x27, 0x22, 0x6, 0x17, 0x0, 0x2, 0x5, 0x97, 0x1}}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xc5c213baea520174, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x19, 0xfffff800, 0x6, 0x1d, 0x6, 0x4, 0x0, 0x85, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400002, 0x4) readv(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xef, 0x7, 0x9, 0x8, 0x0, 0x5, 0x401, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x3}, 0x300, 0x0, 0x7fc58940, 0x8, 0x800, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0xb) 16:54:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de007400000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000ec00000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 896.812808] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:38 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) unshare(0x44010c80) readv(r0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) [ 896.872632] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 896.894262] erofs: read_super, device -> /dev/loop5 [ 896.919677] erofs: options -> fault_injection=0x00000000b6030000,fowner>00000000000000000000, [ 896.967294] erofs: cannot find valid erofs superblock 16:54:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4defffffff00000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de007a00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x20, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 16:54:39 executing program 1: unshare(0x400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x802, 0x0) sendfile(r0, r1, 0x0, 0x100000000) r2 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f0000000540)=[{&(0x7f0000000180)="a61c31aaa258fffa9e8c5646e02d4db8cba355216af8f5da9ac3585873eeb96cccc590cbd5db399c5066af4bc55ac09883f2e60b0065ef12e7668976d689ec7d0efb2ca092d509b83d6b7f66785c9894f2907afab41342f6a6d20bc6866dbe4ab97eb8b995ac864d89265e42936f8efe7a88a62893832cf3893c3d64f521ffcb06a202527388c0162fa10b9a777cf46c9854dbab30ff7e61656b90f478b3212188b338c7c8a7260419a4d91761875037ed6deeb30dd628f6a3e7c028c1399e45ab2d3476a594ade2f7c2753ec3caf8bd8a5be841de8444961b087158af3fb97b63ea516ee0abe6af92e76083ebed24df7b8d", 0xf2, 0x4}, {&(0x7f0000000100)="7bd4aec9050a3fc52bb7505cb6cf25fe53f26db4a31940b459c8d21f102d3513b69842667ca8dfd4689ce3f52d6ad19a552cd0fea0df114c04734c05", 0x3c, 0x8}, {&(0x7f0000000340)="ba06ab000a5a9e39ad8ac56b5de892673346303275f584c950521a6ac415253eed2a1aff2b2bafea7658641510225d56bfff80e9a97a7ef2dd60dcfb29b0e069a5f4aab404d11e08f25f7bc57f587c1fbd31962dedaba5f3ba8a84916f9fcbd3fe08949bec8c2a8f6f14894fa16c9cb112924253f849af45cc3752d37b2f032b65fafddb4b586cff9219ad58b970eaf1dd62d76a8505d17b3bc87f78e0392e9a44fd97bc00ecb3b5a06991b1ae1f94d730828989e226a573f7648a409e2fe3ff951190a1c76e245dfe8b3d9c12058516e34a2e37b0525dd668", 0xd9, 0xf671}, {&(0x7f0000000280)="d91644ab928967a961ca5c1ddaf8cb645aba6c823e0ca6374a03e96e415a6f977aaf77e82435a4b0960e27acfda42091e03c74397f86c08e97496ca11a0238d74fa6a02721504db8f61b5b056c3be3e5a3804d1ae26c32ffd9697ad144786c4dae3a4654cd16fc2c62d9fba6c3668d2da7eadc1f6ee172632b09ce52a9a9ae", 0x7f, 0x8}, {&(0x7f0000000440)="43c2fdef064430979c872b6787dfa2b20b3022ac33231ed0ddfcd2b00245f25285dbfada71979bf3f87764f1800083bf0d3694f6d5e013dc2ede0d88574404fbdeae19ecd3a61739692f10dc98e3b51ecaf61c3e140c8b52a4123d1aee6d1b1d68a3e577474487e5487e0fb62232332781e083d32d474f8290da65e5c9026b150d1de67099fd9b815153dac258222fd71f83b1d3230c5d93742f4eab284d2e24bc391eab86d45c663aeb243d55cf83304be02b6abcf1b207e3e5bc978dd0f04eacbfe2", 0xc3, 0xffffffffffff8001}], 0x210002, &(0x7f00000005c0)={[{@dots}, {@fat=@check_strict}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, ')}-)'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rtc0\x00'}}]}) dup3(r0, r2, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) readv(r3, 0x0, 0xfffffffffffffff0) 16:54:39 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb7030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:39 executing program 3: mlockall(0x1) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x4) mlockall(0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00004aa000/0x4000)=nil, 0x4000, 0xd) move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000000)=[&(0x7f00003db000/0x3000)=nil, &(0x7f0000587000/0x2000)=nil, &(0x7f00001c4000/0x1000)=nil, &(0x7f00002c2000/0x3000)=nil, &(0x7f00002c4000/0x1000)=nil, &(0x7f0000a71000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000040)=[0x9], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 16:54:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de008100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 897.409581] audit: type=1800 audit(1625849679.316:2909): pid=28534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14724 res=0 [ 897.458660] erofs: read_super, device -> /dev/loop5 16:54:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000ff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 897.488014] erofs: options -> fault_injection=0x00000000b7030000,fowner>00000000000000000000, 16:54:39 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x69b8d000) [ 897.523703] audit: type=1800 audit(1625849679.376:2910): pid=28534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14724 res=0 16:54:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de008600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 897.559046] erofs: cannot find valid erofs superblock 16:54:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de88a8ffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:39 executing program 1: unshare(0x2000700) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:39 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb8030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x38, r3, 0x800, 0x80, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0c5c66c18371b4e11d632ee3d5b276c7"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048014}, 0x0) 16:54:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de01a800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00f0ffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000002740), 0x3, 0x80000) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75d) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000f70300012dbd7000fbdbdf250700000007ff00002e2f66696c65302e2f66696c65300000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x80) unshare(0x400) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/244, 0xf4}, {&(0x7f0000001300)=""/177, 0xb1}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4, &(0x7f00000023c0)=""/27, 0x1b}, 0x160) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000002700)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000026c0)={&(0x7f00000024c0)={0x1e8, r2, 0x401, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x26, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x8000, @val=0x7ff, @val=0x22, @val="f634696a07a185cd51476b8fec69c0bd"}}, @gcr_ga={0xbd, 0x6}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}], @NL80211_ATTR_HIDDEN_SSID={0x15, 0x7e, @random="4d5f31520d2a49ebbe44803ea037fc2585"}, @NL80211_ATTR_KEYS={0x15c, 0x51, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3639b1f6e6"}, @NL80211_KEY_SEQ={0x13, 0x4, "cd6ff3bd29a46dd0d8a5bf47bde142"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c9763b3e2e77e4b2fb960caf4c"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "db0e415216821fc2101c8900ad"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f1f390ac19"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "5547d1ff"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "66a367f0e986d2bc41bab8a92b"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4d922d062f"}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, 0x0, 0x0) [ 897.772257] erofs: read_super, device -> /dev/loop5 [ 897.783995] erofs: options -> fault_injection=0x00000000b8030000,fowner>00000000000000000000, [ 897.820125] erofs: cannot find valid erofs superblock [ 897.907583] erofs: read_super, device -> /dev/loop5 [ 897.914648] erofs: options -> fault_injection=0x00000000b8030000,fowner>00000000000000000000, [ 897.925719] erofs: cannot find valid erofs superblock 16:54:40 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000359000/0x3000)=nil, 0x3000, 0xd000, 0x0, &(0x7f0000ff1000/0xd000)=nil) mremap(&(0x7f00006c2000/0xd000)=nil, 0xd000, 0x14000, 0x3, &(0x7f00005a4000/0x14000)=nil) mlockall(0x1) 16:54:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de7fffffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de03b600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x20, r4, 0x301, 0x70bd26, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x4090) 16:54:40 executing program 1: unshare(0x400) unshare(0x500) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) 16:54:40 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xb9030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) [ 898.969140] erofs: read_super, device -> /dev/loop5 [ 898.986232] erofs: options -> fault_injection=0x00000000b9030000,fowner>00000000000000000000, 16:54:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de01b800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 899.026318] erofs: cannot find valid erofs superblock 16:54:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de9effffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:41 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xba030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:41 executing program 0: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0x1}, 0x124, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x19e, 0x0, &(0x7f0000000240)={0x2, 0xbf, {0x1, 0xc, 0x8, "f4a1c659753963ce", 0xaa, "cd644ddadd94247b4863e9ccf133eeceefcb2631a93814179768483a73703c795ad40c55a377432722d0c35980e5d084cb14fcc6e62397a2fe9a668ad9a17ff3e3f62ffa5f6763b72af3bde60f875d1ff018327843e4607a924fa3cc9402567621ff8d01ba7fd57bdaf495144e2b1ef1d553ad2b9826e43e8fb1523fb18a44577506d7f13b7da93cce2224acd6ed2a9e49a5ed42dd9f682b2f42123fbb9e52b8dd34d5837f461d46036a"}, 0x83, "772c30dcdba53ba5e78153d43278e4f6bcd48cbd04bdbfd6b1eff52751d0ab5c04e66b0d12fcd39233fca379efe6caca83291c6ac263a1cfa0c658db4b7aef2745b897e5a6b5514c355434348941b8d7d19f856ee26b40f9e0ab7a401e1ac893ff56319dbc0f10fb6bdc68e7d5061dd0557e8deb02214c9eaf5d1dda8207008a2a606d"}, 0x14e}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0fe100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 899.256736] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 899.268954] erofs: read_super, device -> /dev/loop5 [ 899.308917] erofs: options -> fault_injection=0x00000000ba030000,fowner>00000000000000000000, [ 899.350931] erofs: cannot find valid erofs superblock 16:54:41 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x0) mlockall(0x3) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x80, 0x4) 16:54:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4def0ffffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:41 executing program 1: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x26, 0x38, 0xf, 0x3, 0x4, 0x0, 0x0, 0x115}) readv(r0, 0x0, 0x0) 16:54:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de00f000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB="6cff49b109d345b020546d5b51b18a02616c8720f02caa8d7ec3108a4cee510fbb6dbe784aee62332acd7ec515026ae9174cb98c50cf2a9ae9d713d7703e99f1e87da7c5af1972ee63562b1267bbf6739f70dde33abb653bc318e0"], 0x1c}}, 0x0) 16:54:41 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbb030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 899.881107] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 899.914964] erofs: read_super, device -> /dev/loop5 [ 899.920073] erofs: options -> fault_injection=0x00000000bb030000,fowner>00000000000000000000, 16:54:41 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}}, 0x800) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000200000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 899.931448] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 899.939519] erofs: cannot find valid erofs superblock 16:54:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de03f000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:41 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbc030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 900.139882] erofs: read_super, device -> /dev/loop5 16:54:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de03f100000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 900.183462] erofs: options -> fault_injection=0x00000000bc030000,fowner>00000000000000000000, [ 900.241202] erofs: cannot find valid erofs superblock [ 900.315042] erofs: read_super, device -> /dev/loop5 [ 900.344704] erofs: options -> fault_injection=0x00000000bc030000,fowner>00000000000000000000, [ 900.398660] erofs: cannot find valid erofs superblock 16:54:42 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f00004f5000/0x4000)=nil, 0x4000, 0x2000004, 0x30, 0xffffffffffffffff, 0x50f5f000) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de03f400000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000400000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:42 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbd030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="00082cbd7000fddbdf251800000008000300", @ANYRES32=r5, @ANYBLOB="0c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="4000258014000400f8a4a40da0520e086bc7dde55e6b357b140004009dfc6c2b84ddc9e3caa59b2f419e193c1400040077a8a337263a2df8a1d45746f1f37e3508000300", @ANYRES32=r8, @ANYBLOB="0c0006000100000001000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000001) [ 900.969462] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 901.020031] erofs: read_super, device -> /dev/loop5 [ 901.035422] erofs: options -> fault_injection=0x00000000bd030000,fowner>00000000000000000000, [ 901.076496] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 901.097861] erofs: cannot find valid erofs superblock [ 901.180876] erofs: read_super, device -> /dev/loop5 [ 901.186592] erofs: options -> fault_injection=0x00000000bd030000,fowner>00000000000000000000, [ 901.221870] erofs: cannot find valid erofs superblock 16:54:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x845) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240)=0xcc32, r2, &(0x7f0000000280)=0x7fffffff, 0x9, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/207, 0xcf}], 0x5, 0x0, 0xffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400000, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de02f600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:43 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}}, 0x800) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000700000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:43 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbe030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 901.352778] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="74020000e52d249d256b8f17670596b1132f8a34d80f15069aec83beb40a923d8c567ac09503f0cfab7a002b5727d1b01f5e9f13d80d292ed11f07a22e09fc4f9358afa3546682d791d173976adb2b4ec0ce593affe0667ca509364442bf55ddd136b2456c3f21b4399a822dece750a135245c5a23a7235cd83dcc3ab127def42253aed4b041d3", @ANYRES16=0x0, @ANYBLOB="80012cbd7000fcdbdf251e0000000c0006000200000002000000800024805000038008000400000000000800040003000000280003800c0004000201aaaaaaaaaaaa08000200080000000600010002000000080002000000000008000100020000000c000500000000000000000008000100090000000c0002000203aaaaaaaaaaaa0c00020000000000000000000c0002000201aaaaaaaaaaaa0c00060003000000000000000c00060000000000000000000c00060002000000000000000c0006000100000001000000a40124800c0002000202aaaaaaaaaaaa080001007f0000002c000380080004000600000008000400090000000800010003000000080004000700000005000200020000000c0002000202aaaaaaaaaaaa0c00020000030000000000003c00038008000100020000002800038006000300feff0000060001000300000008000200030000000c000400000000000000000005000200030000000c0003800500020000000000280003800500020001000000080004000700000005000200010000000c0005000000000000000000cc0003800800040008000000050002000100000008000400020000000c0005000100000000000000340003800c0004000200aaaaaaaaaaaa080002000200000006000300a3aa000008000200000000000c0004000200aaaaaaaaaaaa6000038008000200000000000c000400000000000000000006000300000000000800020002000000060001000300000006000300feff0000080002000300000006000100000000000c00040000000000000000000c0004000000000000000000080001000300000008000400070000000c0002000200aaaaaaaaaaaa"], 0x274}, 0x1, 0x0, 0x0, 0x40890}, 0x40000d0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=@bridge_setlink={0xec, 0x13, 0x10, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x30, 0xc200}, [@IFLA_TXQLEN={0x8, 0xd, 0x2}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x10001}, @IFLA_AF_SPEC={0xa8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x2}, {0x8, 0x13, 0x0, 0x0, 0x1}, {0x8, 0xf, 0x0, 0x0, 0x7}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x10001}, {0x8, 0x1f, 0x0, 0x0, 0x555e5cee}, {0x8, 0x1e, 0x0, 0x0, 0x3}, {0x8, 0x1a, 0x0, 0x0, 0x3f}, {0x8, 0xd}, {0x8, 0x1e, 0x0, 0x0, 0x6}, {0x8, 0x2, 0x0, 0x0, 0x4d}, {0x8, 0x9, 0x0, 0x0, 0x87b8}, {0x8, 0x6, 0x0, 0x0, 0x6}, {0x8, 0x2, 0x0, 0x0, 0x1}]}}, @AF_MPLS={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0xfffffffa}]}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x20008010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) [ 901.411111] erofs: read_super, device -> /dev/loop5 [ 901.460346] erofs: options -> fault_injection=0x00000000be030000,fowner>00000000000000000000, [ 901.490016] erofs: cannot find valid erofs superblock [ 901.507916] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 901.534617] erofs: read_super, device -> /dev/loop5 [ 901.541924] erofs: options -> fault_injection=0x00000000be030000,fowner>00000000000000000000, [ 901.580412] erofs: cannot find valid erofs superblock 16:54:43 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x3ff, 0xd4ee, 0x2) 16:54:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4defffe00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 16:54:43 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xbf030000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 902.020508] erofs: read_super, device -> /dev/loop5 16:54:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0fff00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:44 executing program 0: umount2(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c7d65726002012ddd4b58403b6d19b3e735ba48b2167637c43b421cccf33d2c00e52618a0d8423c742808f7bcff360ff592cab053a809a9faa56b5588386f60d7f399b75c75cd8494d038bfbfb805de5dd08ad95a68d0d5bf299ce339d977688f1cd48fc715dc094f822dda18e0160dbc32c78721e015a050808a211e2091c74ecfc187328f780e1bace69e7580350a1c25b950f1f7f85deac9a5ab9edd5e8e02ef0b92e97c6d0e98", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) [ 902.044085] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 902.077703] erofs: options -> fault_injection=0x00000000bf030000,fowner>00000000000000000000, 16:54:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000a00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 902.147548] erofs: cannot find valid erofs superblock 16:54:44 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}}, 0x800) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de7fff00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x100, 0x0, 0x200000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 16:54:44 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xc0ed0000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 902.504262] erofs: read_super, device -> /dev/loop5 [ 902.511165] erofs: options -> fault_injection=0x00000000c0ed0000,fowner>00000000000000000000, [ 902.555500] erofs: cannot find valid erofs superblock [ 902.642149] erofs: read_super, device -> /dev/loop5 [ 902.647207] erofs: options -> fault_injection=0x00000000c0ed0000,fowner>00000000000000000000, [ 902.682720] erofs: cannot find valid erofs superblock 16:54:44 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000b3f000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x1f, 0x1f, 0xc) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffff, 0x200000) mmap$usbfs(&(0x7f00008f7000/0x1000)=nil, 0x1000, 0x9, 0x50, r0, 0x8001) 16:54:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000c00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:44 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x20, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x0) 16:54:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4defeff00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:44 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xe0f5e1e2}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de004003000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 902.956082] audit: type=1800 audit(1625849684.866:2911): pid=28853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14833 res=0 16:54:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000e00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000004000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 903.070927] erofs: read_super, device -> /dev/loop5 [ 903.073563] audit: type=1800 audit(1625849684.976:2912): pid=28858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14833 res=0 [ 903.095564] erofs: options -> fault_injection=0x00000000e0f5e1e2,fowner>00000000000000000000, [ 903.178834] erofs: cannot find valid erofs superblock [ 903.284315] erofs: read_super, device -> /dev/loop5 [ 903.289365] erofs: options -> fault_injection=0x00000000e0f5e1e2,fowner>00000000000000000000, [ 903.335188] erofs: cannot find valid erofs superblock 16:54:45 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}}, 0x800) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 16:54:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000f00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x34, r3, 0x4, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) 16:54:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000340000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 903.656869] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 903.693185] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:45 executing program 3: mlockall(0x1) mlockall(0x2) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f00009cf000/0x1000)=nil, 0x1000, 0x300000c, 0x6, 0x4000000) mremap(&(0x7f0000a0d000/0x2000)=nil, 0x2000, 0x2000, 0x8, &(0x7f00007b7000/0x2000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x2) 16:54:45 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xe2e1f5e0}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4defffff0000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de001000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x332}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6e834cb6cb16d94c4e36f602c30cf942"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b15afb91071c401a997a91dbad33aafae1717716afc396abadf561e9029559e8"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24008043}, 0x4000000) [ 904.034968] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 904.049097] erofs: read_super, device -> /dev/loop5 [ 904.072223] erofs: options -> fault_injection=0x00000000e2e1f5e0,fowner>00000000000000000000, 16:54:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de006000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000010000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 904.099116] erofs: cannot find valid erofs superblock [ 904.110186] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00f000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 904.172346] erofs: read_super, device -> /dev/loop5 [ 904.177405] erofs: options -> fault_injection=0x00000000e2e1f5e0,fowner>00000000000000000000, [ 904.249770] erofs: cannot find valid erofs superblock 16:54:46 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}}, 0x800) mlockall(0x1) 16:54:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000020000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de008602000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:46 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xea260000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 904.479033] erofs: read_super, device -> /dev/loop5 [ 904.497971] erofs: options -> fault_injection=0x00000000ea260000,fowner>00000000000000000000, [ 904.545692] erofs: cannot find valid erofs superblock [ 904.632376] erofs: read_super, device -> /dev/loop5 [ 904.637540] erofs: options -> fault_injection=0x00000000ea260000,fowner>00000000000000000000, [ 904.659975] erofs: cannot find valid erofs superblock 16:54:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000030000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:46 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r3, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x28, r1, 0x301, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x26}, 0x1, 0x0, 0x0, 0x15}, 0x0) 16:54:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000003000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:46 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xf6ffffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000006000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000040000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 904.998034] erofs: read_super, device -> /dev/loop5 [ 905.007537] erofs: options -> fault_injection=0x00000000f6ffffff,fowner>00000000000000000000, [ 905.016686] erofs: cannot find valid erofs superblock 16:54:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000050000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 905.066763] erofs: read_super, device -> /dev/loop5 [ 905.072173] erofs: options -> fault_injection=0x00000000f6ffffff,fowner>00000000000000000000, [ 905.116252] erofs: cannot find valid erofs superblock 16:54:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000007000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:47 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xfbffffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 16:54:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000060000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000a000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 905.365992] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 905.382818] erofs: read_super, device -> /dev/loop5 [ 905.387873] erofs: options -> fault_injection=0x00000000fbffffff,fowner>00000000000000000000, [ 905.428078] erofs: cannot find valid erofs superblock 16:54:47 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000b6e000/0x1000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) mmap(&(0x7f0000520000/0x4000)=nil, 0x4000, 0x2, 0x93a35a242e227bf0, r0, 0x4ffb1000) mlockall(0x5) 16:54:47 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xfcfdffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mlockall(0x1) 16:54:47 executing program 0: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x1020, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x42}, @private0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1ff, 0xc6, 0xbc, 0x100, 0x81, 0x108}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000000) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000280)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) dup3(r7, r6, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000240)={{r8}, 0x80000000, 0xd1, 0xeeb}) dup3(r4, r2, 0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=""/19, &(0x7f0000000080)=0x13) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) 16:54:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000070000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000c000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 905.984580] erofs: read_super, device -> /dev/loop5 [ 905.996526] erofs: options -> fault_injection=0x00000000fcfdffff,fowner>00000000000000000000, [ 906.018113] erofs: cannot find valid erofs superblock 16:54:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000e000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000080000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 906.027587] audit: type=1800 audit(1625849687.936:2913): pid=29028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14785 res=0 16:54:48 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xfdfdffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 906.141013] audit: type=1800 audit(1625849688.046:2914): pid=29037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14785 res=0 16:54:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000090000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 906.204529] validate_nla: 1 callbacks suppressed [ 906.204539] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00c00e000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 906.284000] erofs: read_super, device -> /dev/loop5 [ 906.298257] audit: type=1800 audit(1625849688.206:2915): pid=29028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14785 res=0 [ 906.308708] erofs: options -> fault_injection=0x00000000fdfdffff,fowner>00000000000000000000, 16:54:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000f000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 906.404183] erofs: cannot find valid erofs superblock [ 906.417197] audit: type=1800 audit(1625849688.286:2916): pid=29053 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14785 res=0 [ 906.525613] erofs: read_super, device -> /dev/loop5 [ 906.540715] erofs: options -> fault_injection=0x00000000fdfdffff,fowner>00000000000000000000, [ 906.575040] erofs: cannot find valid erofs superblock 16:54:48 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x4) mlockall(0x0) mremap(&(0x7f0000a85000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000074e000/0x3000)=nil) 16:54:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de006558000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000000a0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x0, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0xa0) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:48 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xff0f0000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:48 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mlockall(0x1) [ 907.079629] erofs: read_super, device -> /dev/loop5 16:54:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000060000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 907.100062] erofs: options -> fault_injection=0x00000000ff0f0000,fowner>00000000000000000000, 16:54:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000000b0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 907.178684] erofs: cannot find valid erofs superblock 16:54:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de005865000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:49 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xffff0300}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:49 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x0, &(0x7f00007fc000/0x600000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x401ffc000) kcmp(0x0, 0x0, 0x35b337639510eacd, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000004780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000340)='./file2\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [{}, {}, {0x2, 0x6, r2}], {0x4, 0x4}, [], {0x10, 0xe}}, 0x3c, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600), 0x80010, &(0x7f0000000640)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@dont_appraise}]}}) clone(0x0, &(0x7f0000000400)="6cdfe13995ef402447500d7262c54a67f5c8b417d6498d752ce768cdd11d5896a48be902d86dbddb3a3a7d309eb0cee1cc18780731251a64190197006a38f66d53fbfe1b01b9047bdc0efc766f2ecaf5523eeedfe075e921044660f3aaac0e2d5775659994643315183b8715d7a001854b004c8ceb9f9752f896a129a0a4b42631eb6787d9cd7e1b8770f87bfced0e88ae9a37d28d8db20d82d17b333a2d0a7a2d610083", &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="3fda1beb47b1c262bdaf962fb98ab860dd58ae39faef6e43f8fdc9444c5def217a2ef8197e7f6665e27cdaa7b5f18f1f293f615a41f059119b3c2386ca71598316a5b4260c93f73b92c23cae79f9d7459be8759f6bb89840717bd495e1fd3a66a736a7") gettid() ptrace$setopts(0x4206, 0x0, 0x8001, 0x30) tkill(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180)="2ffb63db8cb3f81e6b80e92e9b2d8f3a9817876da332d0e396ed98e092a8c11d5de68f6752efe81d17cf09445095d83d146853", 0x33, 0x7}, {&(0x7f0000000200)="c925db5ae7fba9115611bb43ce3f3a9c2c3d29ac46c5a7099efb8eba6abc21ebc90e14c6eb30d9ce12a346fe91009ae4dc3b5d1c8038cab48b5c6a9202d0662bde10f81b922747ca4a3e8951ad4b7cf4afde28b87b543ab9f4cb32c700066aa900affdc95de86d84d3381ca4de87d52eacbe10f59e1a4a6dc203b2353ecd3e8815ee2bb3b1320aa3c52a6a980c3fdb90a3de86f0cbcf44b5e7f46e4d45244790d3fad07ac167cbbdcd4b84d4cda30fb4d531625d870073fb86c76d94388d2b2eb75f42a7a0d866d93f84c31928215ca5941874fb56e8e9", 0xd7, 0x80000001}], 0x80000, &(0x7f0000000340)=ANY=[@ANYBLOB="2f6465762f66757365002c232c747275737465642e6f7665726c61792e6f706171754e002c61707072616973652c7067723d30303030303030303030303030303030303033302c7063723d30303030ef0600000000000030303030303030302c736d61636b6673666c6f6f723d747275737465642e6f7665726c61792e6f7061717565002c7365636c6162656c2c00"]) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000000c0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 907.415493] erofs: read_super, device -> /dev/loop5 [ 907.450422] erofs: options -> fault_injection=0x00000000ffff0300,fowner>00000000000000000000, [ 907.529941] erofs: cannot find valid erofs superblock [ 907.537050] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 907.662302] erofs: read_super, device -> /dev/loop5 [ 907.667361] erofs: options -> fault_injection=0x00000000ffff0300,fowner>00000000000000000000, [ 907.741799] erofs: cannot find valid erofs superblock [ 908.255207] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000000e0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000081000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:50 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xffff1f00}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:50 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mlockall(0x1) 16:54:50 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:50 executing program 3: mlockall(0x1) mlockall(0x5) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004e7000/0x4000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10, 0x2) mlockall(0x4) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000040)=0x8, 0x800, 0x1) 16:54:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000286000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 908.485665] erofs: read_super, device -> /dev/loop5 16:54:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000000f0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 908.525139] erofs: options -> fault_injection=0x00000000ffff1f00,fowner>00000000000000000000, [ 908.567923] erofs: cannot find valid erofs superblock 16:54:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000ec0000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:50 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xfffffdfc}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x18040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 16:54:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000100000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000f0000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 908.787651] erofs: read_super, device -> /dev/loop5 16:54:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000011e0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 908.819273] erofs: options -> fault_injection=0x00000000fffffdfc,fowner>00000000000000000000, 16:54:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000ff000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 908.876773] erofs: cannot find valid erofs superblock [ 908.997238] erofs: read_super, device -> /dev/loop5 [ 909.019416] erofs: options -> fault_injection=0x00000000fffffdfc,fowner>00000000000000000000, [ 909.076207] erofs: cannot find valid erofs superblock 16:54:51 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000002200000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000a8b000/0x1000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000040030000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r3, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40011}, 0x40076) 16:54:52 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xfffffdfd}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000033a0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) [ 910.160410] erofs: read_super, device -> /dev/loop5 16:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000480000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000003400000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 910.187619] erofs: options -> fault_injection=0x00000000fffffdfd,fowner>00000000000000000000, [ 910.200737] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 910.239379] erofs: cannot find valid erofs superblock [ 910.267349] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000004c0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xffffff7f}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00fffff00000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9650a262d50b00c1fb771853609172b57b11b8493ffec2ee2825e2ed163bffa9", "f22f9ae83af839277633330ee1265ebccda9704efd1b8eca0ff4079eff3f851c", "2f8c32b75526ed7e8f7196967d77cbfa159fa5303545443b544579299184cf4c", "fb4268d5c5b099314a0d705323a11cb17f5cc5ba09ba772496d119e7dd825a93", "658401b401d2e07fc1fe2101a2db85d1a2e21de636d75eb1ecb278eccf7e7e2b", "d7f500388860072f225a1cac"}}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="114cf1499b0bf67c3bc19a8fd9623641e5221fd4d70bcc749519492b223b58e320f1104653f18ff7a49433a4f9fd2c2307545f656e108a1467111c4145bf9b9a675b13ba353e20f1824ef98ffc2b65b85242", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000009f849a9efc6a8ac29b7967ed80a7149cbfbb0e8c58039cd5237a3e393f47fb58aa5f0e49662ccda222aba982eec06d074921f6c8e418239815a7cd01b0d5b8f13ee4328b8170f80ceb3e20bf8bf97cd40d813542e785f10b84ca70a0008f9bf5d958626f65a1baff9890a6fc4d66c4e8bf938c7b29c15f94fea05a824c8377c2756a15255420940798527c21f54c70e6", @ANYRES16=r4, @ANYBLOB="010000000000000000002100000009001f0070687930000000000c00050000000000000000000500200000000000"], 0x34}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) [ 910.462641] erofs: read_super, device -> /dev/loop5 [ 910.482514] erofs: options -> fault_injection=0x00000000ffffff7f,fowner>00000000000000000000, [ 910.529406] erofs: cannot find valid erofs superblock 16:54:52 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000835000/0x3000)=nil, 0x3000, 0x3) 16:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000600000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000100a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x20, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) 16:54:52 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xffffff8c}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:52 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000001620000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 911.118615] erofs: read_super, device -> /dev/loop5 [ 911.137945] erofs: options -> fault_injection=0x00000000ffffff8c,fowner>00000000000000000000, 16:54:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000200a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 911.190897] erofs: cannot find valid erofs superblock [ 911.274926] erofs: read_super, device -> /dev/loop5 16:54:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000058650000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 911.299697] erofs: options -> fault_injection=0x00000000ffffff8c,fowner>00000000000000000000, 16:54:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000300a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 911.359514] erofs: cannot find valid erofs superblock 16:54:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 16:54:53 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xfffffff6}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 911.589266] erofs: read_super, device -> /dev/loop5 [ 911.606227] erofs: options -> fault_injection=0x00000000fffffff6,fowner>00000000000000000000, [ 911.634345] erofs: cannot find valid erofs superblock [ 911.706595] erofs: read_super, device -> /dev/loop5 [ 911.713422] erofs: options -> fault_injection=0x00000000fffffff6,fowner>00000000000000000000, [ 911.765102] erofs: cannot find valid erofs superblock 16:54:54 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000b5e000/0x9000)=nil, 0x9000, 0x1e) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000680000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000400a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x11) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x1, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="98834330346bc05b0a0de15c6e1df657e91cc72175958a6600bb8820f174497de618fbd794470467ca460edc36a77ccc30b7f60000050001000000e51b29e1f44039f7d1f6794de15ac37f151c167ccb207bf9310bd28f7d03cb65abc1b8c1a8b60d05fc645fc25bc877709f70386ec05099c79853f67eb444085cb22b86411974a8f8d7c664048919d8d9b5f30c8c4791c870749ecd8eb9d1269d754df06f8b894e5b0c4be7c3f5f5e393ee7eda20d0ef9662ecb7119b2734b9557a0e4753e4d3c27f78", @ANYRES16=r8, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x60}, 0x4) 16:54:54 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xfffffffb}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:54 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000006c0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000600a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 912.280057] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 912.322612] erofs: read_super, device -> /dev/loop5 [ 912.349992] erofs: options -> fault_injection=0x00000000fffffffb,fowner>00000000000000000000, [ 912.350327] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 912.392207] erofs: cannot find valid erofs superblock 16:54:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000700a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000700000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 912.482200] erofs: read_super, device -> /dev/loop5 [ 912.502880] erofs: options -> fault_injection=0x00000000fffffffb,fowner>00000000000000000000, 16:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000740000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000800a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 912.566485] erofs: cannot find valid erofs superblock 16:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000a00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:55 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000780)={{}, 0x0, 0x0, @unused=[0x9d1, 0x0, 0x7fff], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x7, 0x80, 0x0, 0x8, 0x0, 0x0, 0x30114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xe0cd}, 0x1002, 0x0, 0x10000, 0x0, 0x6, 0xec29, 0xe3c1, 0x0, 0x0, 0x0, 0x2c}, 0xffffffffffffffff, 0xe, r1, 0x0) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x1, 0x72, 0x7, 0x0, 0xd6d7, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x4004, 0x3, 0x5, 0x6, 0xffff, 0xffff, 0xc58e, 0x0, 0x3ff8000, 0x0, 0x2}, r2, 0x9, r1, 0x3) clone(0x40012000, &(0x7f0000000400), &(0x7f0000000280), &(0x7f00000004c0), &(0x7f0000000540)="dcd7ffc20c9dbd5d23614df31e4e9ad69c4df6763860") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) 16:54:55 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0xedc000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000007a0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:55 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x4) mlock2(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x1) 16:54:55 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:55 executing program 0: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x87) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB="40961261860c207b035f606ea0e059a4bdb9e80e5bbaf0c86f33b54ab378cc0a750faefec83610d4b60af3ac7f19d6cbba1f746612f0f25b9c7f5ad23fb7d8fc4efcda1aeb3b8a00380366db9f7d34a6206035892d1ec122941779defa"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 913.322161] erofs: read_super, device -> /dev/loop5 16:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000810000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000c00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 913.348056] erofs: options -> fault_injection=0x0000edc000000000,fowner>00000000000000000000, [ 913.388113] erofs: cannot find valid erofs superblock 16:54:55 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x4000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000e00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000000860000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 913.523374] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 913.587764] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 913.662919] erofs: read_super, device -> /dev/loop5 16:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000000f00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4deffffa8880000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 913.720995] erofs: options -> fault_injection=0x0004000000000000,fowner>00000000000000000000, [ 913.780159] erofs: cannot find valid erofs superblock [ 913.852792] erofs: read_super, device -> /dev/loop5 16:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000001000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 913.874021] erofs: options -> fault_injection=0x0004000000000000,fowner>00000000000000000000, [ 913.889722] BUG: Bad rss-counter state mm:0000000008078f4b idx:0 val:2 [ 913.909922] erofs: cannot find valid erofs superblock 16:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4deffffff9e0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000070000000a0004007770616e3000000008000100000000004a8d794a3bf10087797d9aef51116f297ceb208b220806d03bf8646d4cfc813611c186708929e09dc283d23e90e4222ecbe3b610158225b71d2c13f819adabb90904aceeea16fef62302b40bed276b0be742383efa964f9a3426475967da52a30a1a9ad999ca2ab6c877bfb94710b60e4634035c17979879182f44"], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, r3, 0x23, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xca}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20018005}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB="9d172f55aa9283a5166c97e5d8cf9c79da968bea73b0ff50193a4c001de35ba62a604b53307a97fc2041d9be208cd48e27326e98f86f313a8795dbce25d1900f0c"], 0x1c}}, 0x0) 16:54:56 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x7ffffffffffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000006000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000001a80000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:56 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x4, 0x6a8, 0x2) 16:54:56 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000586500a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 914.472191] erofs: read_super, device -> /dev/loop5 16:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000003b60000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 914.522119] erofs: options -> fault_injection=0x0007ffffffffffff,fowner>00000000000000000000, [ 914.570569] erofs: cannot find valid erofs superblock 16:54:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x15, r1, 0x311, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x0, 0x3, r2}]}, 0x20}}, 0x0) 16:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000008100a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 914.650614] erofs: read_super, device -> /dev/loop5 16:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000001b80000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 914.677458] erofs: options -> fault_injection=0x0007ffffffffffff,fowner>00000000000000000000, [ 914.719667] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 914.733054] erofs: cannot find valid erofs superblock 16:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000028600a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:56 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x81000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00ffffa88800a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de00000fe10000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 914.987080] erofs: read_super, device -> /dev/loop5 16:54:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, r2, 0xe04f32dee9a1d759, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xe0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81a}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) [ 915.009543] erofs: options -> fault_injection=0x0081000000000000,fowner>00000000000000000000, [ 915.056486] erofs: cannot find valid erofs superblock [ 915.131701] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 915.184955] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:54:57 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x100000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00ffffff9e00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000003f00000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x4000004) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000c17af2d9c5ea8a53c91ddbf4da3a13ade6724a3526", @ANYRES16=r2, @ANYBLOB="010300000000000000000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x238, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7294d8fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57e4a52c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x190, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59d127ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72efc6e2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f4a640f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5633c2be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e35ca73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56686360}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f485726}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fb130cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21a2de09}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x791de4ed}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x704d52ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a80cc42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ae3ec5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65b3ba5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x153d4537}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb9cb1fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45bd3a74}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dc9d9de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5afb3305}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a70ae8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43f421a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69d5cdd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75a0258e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52cd15f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1183c9a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ced19c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) 16:54:57 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f000062a000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000308000/0x3000)=nil, 0x3000) mlockall(0x0) msync(&(0x7f00008fd000/0x3000)=nil, 0x3000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x2, 0x4, 0x1000, &(0x7f00004e6000/0x1000)=nil}) 16:54:57 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4defffffff00000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c080}, 0x8084) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x4004040) 16:54:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000ec000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 915.764245] erofs: read_super, device -> /dev/loop5 [ 915.804809] erofs: options -> fault_injection=0x0100000000000000,fowner>00000000000000000000, [ 915.853348] erofs: cannot find valid erofs superblock 16:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000003f10000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 915.882860] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 915.918287] erofs: read_super, device -> /dev/loop5 16:54:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00fffffff000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 915.947401] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 915.950898] erofs: options -> fault_injection=0x0100000000000000,fowner>00000000000000000000, [ 916.004331] erofs: cannot find valid erofs superblock 16:54:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000050000000000000001000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 16:54:58 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x200000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000003f40000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000000ff00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000002f60000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 916.209344] erofs: read_super, device -> /dev/loop5 [ 916.265892] erofs: options -> fault_injection=0x0200000000000000,fowner>00000000000000000000, [ 916.303672] erofs: cannot find valid erofs superblock [ 916.370980] erofs: read_super, device -> /dev/loop5 [ 916.377117] erofs: options -> fault_injection=0x0200000000000000,fowner>00000000000000000000, [ 916.398638] erofs: cannot find valid erofs superblock 16:54:58 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a56000/0x1000)=nil) mlockall(0x5) mlockall(0x2) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffd, 0x2) 16:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0088a8ffff00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:58 executing program 0: pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="431f1360f34dfd58874f6863dddd85fe7efef9ad3dc1bf63adb4ed5653a8b39d0e52c865b98fcc61bbb2c77cd8b36276", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x748fe86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78bcc373}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13c7713e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15eaf0b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5725a669}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cf0fe05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42846f2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70c65df7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba636b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f796097}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x800) 16:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de0000fffe0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:58 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x300000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de00000fff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 916.886416] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 916.899847] erofs: read_super, device -> /dev/loop5 [ 916.920509] erofs: options -> fault_injection=0x0300000000000000,fowner>00000000000000000000, 16:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000f0ffff00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 916.944506] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 916.962690] erofs: cannot find valid erofs superblock 16:54:58 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de00007fff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:58 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x400000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de007fffffff00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 917.184645] erofs: read_super, device -> /dev/loop5 [ 917.202865] erofs: options -> fault_injection=0x0400000000000000,fowner>00000000000000000000, [ 917.216910] erofs: cannot find valid erofs superblock [ 917.290702] erofs: read_super, device -> /dev/loop5 [ 917.305379] erofs: options -> fault_injection=0x0400000000000000,fowner>00000000000000000000, [ 917.330207] erofs: cannot find valid erofs superblock 16:54:59 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 16:54:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de88a8ffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) 16:54:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de009effffff00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:54:59 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x500000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:54:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:54:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00f0ffffff00a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 917.899697] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 917.929357] erofs: read_super, device -> /dev/loop5 16:54:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de00f0ffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 917.964395] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 917.973289] erofs: options -> fault_injection=0x0500000000000000,fowner>00000000000000000000, [ 918.012632] erofs: cannot find valid erofs superblock 16:54:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000002000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de7fffffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:00 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x600000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000003000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 918.263104] erofs: read_super, device -> /dev/loop5 [ 918.288350] erofs: options -> fault_injection=0x0600000000000000,fowner>00000000000000000000, [ 918.330215] erofs: cannot find valid erofs superblock [ 918.428804] erofs: read_super, device -> /dev/loop5 [ 918.448154] erofs: options -> fault_injection=0x0600000000000000,fowner>00000000000000000000, [ 918.476476] erofs: cannot find valid erofs superblock 16:55:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de9effffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:00 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ba1000/0x3000)=nil) 16:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000004000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x100, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000085}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf25090000000c0006000300000000000000050007000b0000000800010002000000"], 0x30}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x94) 16:55:00 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x700000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:00 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:55:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4def0ffffff0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000006000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 918.997551] erofs: read_super, device -> /dev/loop5 [ 919.039641] erofs: options -> fault_injection=0x0700000000000000,fowner>00000000000000000000, [ 919.087760] erofs: cannot find valid erofs superblock 16:55:01 executing program 0: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001a80)={0x0, 0x99, "79281d033dcf76546792c997a469b217eeb5ce06334b8338967884896255f2e5e565d3c1b2497a702367ea549e6a4031578bac55a915b0d6b553e843e18b4c26502080948b0288159cbc14ccecdf528b1ac4ef81d8c2a929693f9ef0df9cb7be7bec7c3b50dc3e5aeeadba0d4dca3ae68e04675921eb64b7db9cebf88990f4f4653f78fac184d05149a0386df6227438d912d32927ac84133a"}, &(0x7f00000000c0)=0xa1) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={r0, 0x81, 0x8, 0xf07, 0x720f, 0x81, 0x8, 0x7fff, {0x0, @in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, 0x8001, 0x2a, 0x7f, 0x3, 0x8}}, &(0x7f00000001c0)=0xb0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000000) r7 = syz_mount_image$omfs(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x6, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000a80)="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", 0x1000, 0x4}, {&(0x7f0000000340)="781b516c748a22fedf734a8c5d9c7f463d2c78d3f64dcefd2e9d54a06c84f7b0a04ef27e32834c0c1ccfdc54e4df5c0b0cc5cdb0afa7e0241816448f0e081af4bc9f2d3a22b05aea9e0366d4557936f13e56dfaae40e518c5625daa45ce84c6f39983fe06d648007c5fa3d4ef89c89c3355c242662a84abd969c0a3114d1d142c3dd8fc9b90113324ad2e5", 0x8b, 0x81}, {&(0x7f0000000400)="2d56443123af1b03578fe97e16869d8436ece3aa30cb2b6e12b49ded4222c06274a41eb92c5d4d91c69594e8bc290e802673399132b39c3bf4b1ab62f043cb290c24c9395244726a44803ebacd12e984c42b4c80cb249ebfc4ffc1c24c0fb4312e3fc3d3c7537b8346d92991c03be2fcee98c68fe5151aae87467f5d261ae3857e4026505a94e7398bba73548375176376d21041963618eb1eab085a3bc203df1218a8f64911ec181be4f848751dffab68f45297bfd329d88c98bb6429ec130e52adaa", 0xc3, 0xf96a}, {&(0x7f0000000500)="6bb03396fb4cda7f4ed6f869c728ed332b0f3d1b7c7c781f4d2d800d110bb4f3afd95d769a21152eeb36e12df96ddae10cb4262f9e29c4c35be98d54946ca5b0c9217676881455d086eb33018ecba916379505ad3aea84a247a33b78c5d271f53eb6ad85231153fd19e85fba3301001ec496411ad9a2b4dfebe082c0f886b0e924f2889fd3d96f2296bf38cfa5ff0e909a833d144fd3ffdef2ad86ad466a138661e20185582e42e4b45ff567bb425b5d3970f3fa73e286ab405342d4520bd83c21", 0xc1, 0x7}, {&(0x7f0000000600)="3796e5b3ce99c26981f6510614be6e597556d90ae97614a5bfc9bf6b0f92cd71d71ea812338ff6d71e24c592c966a169171124a32434807a59879875ab897fbcd13fca82df7399329461fd01942ae92f20ba5aef196776e0b15d928a27994c5573320cdc191dd081a45e803e9ab3375abefa3efc22b50d081c2e6581", 0x7c, 0x3}, {&(0x7f0000000680)="c346d2c3845aad30c702df3a2f74e3d48070c764e9f6a5f985b400e4c2f0403fc53cfa2e961ca05ff743b9ad5d2e2eb930fcf7de8fe77e98544d237499c7e88d1a3202dc25ad5148cdd1f7888b25ee4f214dbc85ac15d07021be7f9f2a4d0561249b88", 0x63, 0xc9}], 0x30, &(0x7f0000000880)={[{'\'+)&)'}, {'\x00'}, {'nl802154\x00'}, {'-+\'-:'}, {'#'}, {'\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '.'}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x36, 0x35, 0x36, 0x60, 0x4, 0x66], 0x2d, [0x33, 0x36, 0x61, 0x65], 0x2d, [0x31, 0x61, 0x34, 0x34], 0x2d, [0x38, 0x38, 0x30, 0x66], 0x2d, [0x31, 0x65, 0x61, 0x39, 0xfc, 0x38, 0x33, 0x36]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'nl802154\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@pcr={'pcr', 0x3d, 0xb}}, {@uid_lt={'uid<', 0xee01}}]}) futimesat(r7, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000700)={{0x77359400}, {0x0, 0xea60}}) dup3(r5, r4, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x7f}, 0x8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000007, 0x30, r8, 0x61098000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000200000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000007000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 919.171596] erofs: read_super, device -> /dev/loop5 [ 919.194734] erofs: options -> fault_injection=0x0700000000000000,fowner>00000000000000000000, [ 919.227304] audit: type=1800 audit(1625849701.137:2917): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16021 res=0 [ 919.240248] erofs: cannot find valid erofs superblock 16:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000300000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000008000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 919.328132] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 919.442760] audit: type=1800 audit(1625849701.357:2918): pid=29811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16021 res=0 [ 919.471301] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 16:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000a000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:01 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x800000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000400000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044095}, 0x4000884) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="00000004", @ANYRES16=r7, @ANYBLOB="010300000000000000000100fbff07000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x321bcd6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9f98ce}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3115cadb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6638d0f0}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79a2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4810}, 0x20004800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:55:01 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:55:01 executing program 3: mlockall(0x1) mlockall(0x5) mremap(&(0x7f0000218000/0x4000)=nil, 0x4000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000760000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0xf0, 0x8001, 0x4) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x3f}, 0x839, 0x800, 0x6, 0x0, 0x4, 0x6, 0x0, 0x0, 0x3b}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000500)={0x0, r1}, &(0x7f0000000640)=""/217, 0xd9, &(0x7f0000000840)={&(0x7f00000005c0)={'crct10dif\x00'}, &(0x7f0000000740)="4349e6ca515dc51fdea58a2198e4c5670c5527894b3c617499827a936a087350c2b258cd2ed52438856bee584afa29e8aca61bf2bfb71d5acf3097a37787a9b26198e6dc8e56541a5fe5e782c133acbefd72cb2f725f1bf5bd6977c0cd9cd7e8a02eb25f124035e9317d264f0c06cd7a2a4e8858189f9acb576369bb79c04bcba418cb4a2a070a7872371cc2fc3ab2d0387fb134378ae7b9e67aeec17be63de6f26bd79e3764143e8e98a4e36f11f116c09aeb045b9d9e66516098b95e66019870998ad129da931b412ad0fc7fd29520bffea7124ab1ab3be62cff696ea4fe61d66e3ed8", 0xe4}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x9403, 0x5, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'rose0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) mbind(&(0x7f00008d7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) mremap(&(0x7f0000905000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f00005ca000/0x3000)=nil) mlockall(0x3) [ 920.017482] erofs: read_super, device -> /dev/loop5 16:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000c000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 920.043644] erofs: options -> fault_injection=0x0800000000000000,fowner>00000000000000000000, 16:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000500000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 920.096040] erofs: cannot find valid erofs superblock 16:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000600000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000e000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 920.172058] erofs: read_super, device -> /dev/loop5 [ 920.253500] erofs: options -> fault_injection=0x0800000000000000,fowner>00000000000000000000, 16:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000700000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 920.308003] erofs: cannot find valid erofs superblock 16:55:02 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x2000000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de00000f000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000900000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000010000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 920.592038] erofs: read_super, device -> /dev/loop5 [ 920.626351] erofs: options -> fault_injection=0x2000000000000000,fowner>00000000000000000000, [ 920.637359] erofs: cannot find valid erofs superblock [ 921.047994] Cannot find add_set index 0 as target 16:55:03 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:55:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000060000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:03 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x3f00000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000a00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000f0000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 921.354370] erofs: read_super, device -> /dev/loop5 [ 921.393878] erofs: options -> fault_injection=0x3f00000000000000,fowner>00000000000000000000, 16:55:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000b00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 921.445355] erofs: cannot find valid erofs superblock 16:55:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000086020000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 921.534678] erofs: read_super, device -> /dev/loop5 [ 921.539723] erofs: options -> fault_injection=0x3f00000000000000,fowner>00000000000000000000, 16:55:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000c00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 921.609196] erofs: cannot find valid erofs superblock 16:55:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000030000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000e00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:03 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x6000000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000060000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 921.861106] erofs: read_super, device -> /dev/loop5 [ 921.896936] erofs: options -> fault_injection=0x6000000000000000,fowner>00000000000000000000, [ 921.942743] erofs: cannot find valid erofs superblock [ 922.013618] erofs: read_super, device -> /dev/loop5 [ 922.019895] erofs: options -> fault_injection=0x6000000000000000,fowner>00000000000000000000, [ 922.030425] erofs: cannot find valid erofs superblock 16:55:04 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:55:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de000f00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 16:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de000000070000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:04 executing program 3: mlockall(0x1) mlockall(0x0) mlockall(0x4) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlockall(0x0) mbind(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0x8001, 0x0, 0x0, 0x2) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f00002b4000/0x1000)=nil, 0x6000) r1 = semget$private(0x0, 0x2, 0x440) semtimedop(r1, &(0x7f0000000280)=[{0x0, 0x8001, 0x1000}], 0x1, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semget(0x1, 0x1, 0x4c) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000280)=[{0x0, 0x8001, 0x1000}], 0x1, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x8001, 0x4, 0xa, 0x1ff, 0x512d, 0x400, 0x6000, 0x8001]) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/233) shmctl$IPC_RMID(r0, 0x0) 16:55:04 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x7fffffffffffffff}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de001000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000a0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) [ 922.267652] erofs: read_super, device -> /dev/loop5 [ 922.286897] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 922.294132] erofs: options -> fault_injection=0x7fffffffffffffff,fowner>00000000000000000000, [ 922.340304] erofs: cannot find valid erofs superblock 16:55:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de004800000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000c0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:04 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8303000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:04 executing program 0: mlockall(0x1) mlockall(0x5) mremap(&(0x7f0000218000/0x4000)=nil, 0x4000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000760000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0xf0, 0x8001, 0x4) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x3f}, 0x839, 0x800, 0x6, 0x0, 0x4, 0x6, 0x0, 0x0, 0x3b}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000500)={0x0, r1}, &(0x7f0000000640)=""/217, 0xd9, &(0x7f0000000840)={&(0x7f00000005c0)={'crct10dif\x00'}, &(0x7f0000000740)="4349e6ca515dc51fdea58a2198e4c5670c5527894b3c617499827a936a087350c2b258cd2ed52438856bee584afa29e8aca61bf2bfb71d5acf3097a37787a9b26198e6dc8e56541a5fe5e782c133acbefd72cb2f725f1bf5bd6977c0cd9cd7e8a02eb25f124035e9317d264f0c06cd7a2a4e8858189f9acb576369bb79c04bcba418cb4a2a070a7872371cc2fc3ab2d0387fb134378ae7b9e67aeec17be63de6f26bd79e3764143e8e98a4e36f11f116c09aeb045b9d9e66516098b95e66019870998ad129da931b412ad0fc7fd29520bffea7124ab1ab3be62cff696ea4fe61d66e3ed8", 0xe4}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x9403, 0x5, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'rose0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) mbind(&(0x7f00008d7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) mremap(&(0x7f0000905000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f00005ca000/0x3000)=nil) mlockall(0x3) [ 922.521967] erofs: read_super, device -> /dev/loop5 [ 922.557560] erofs: options -> fault_injection=0x8303000000000000,fowner>00000000000000000000, [ 922.599048] erofs: cannot find valid erofs superblock [ 922.664675] erofs: read_super, device -> /dev/loop5 [ 922.670351] erofs: options -> fault_injection=0x8303000000000000,fowner>00000000000000000000, [ 922.707457] erofs: cannot find valid erofs superblock 16:55:05 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1) 16:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de004c00000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000000e0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:05 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8403000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 923.290923] erofs: read_super, device -> /dev/loop5 [ 923.314590] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 923.323224] erofs: options -> fault_injection=0x8403000000000000,fowner>00000000000000000000, [ 923.383523] erofs: cannot find valid erofs superblock 16:55:05 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) 16:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001d7dff4de006000000000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32=r0, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:05 executing program 0: mlockall(0x1) mlockall(0x5) mremap(&(0x7f0000218000/0x4000)=nil, 0x4000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000760000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0xf0, 0x8001, 0x4) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x3f}, 0x839, 0x800, 0x6, 0x0, 0x4, 0x6, 0x0, 0x0, 0x3b}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000500)={0x0, r1}, &(0x7f0000000640)=""/217, 0xd9, &(0x7f0000000840)={&(0x7f00000005c0)={'crct10dif\x00'}, &(0x7f0000000740)="4349e6ca515dc51fdea58a2198e4c5670c5527894b3c617499827a936a087350c2b258cd2ed52438856bee584afa29e8aca61bf2bfb71d5acf3097a37787a9b26198e6dc8e56541a5fe5e782c133acbefd72cb2f725f1bf5bd6977c0cd9cd7e8a02eb25f124035e9317d264f0c06cd7a2a4e8858189f9acb576369bb79c04bcba418cb4a2a070a7872371cc2fc3ab2d0387fb134378ae7b9e67aeec17be63de6f26bd79e3764143e8e98a4e36f11f116c09aeb045b9d9e66516098b95e66019870998ad129da931b412ad0fc7fd29520bffea7124ab1ab3be62cff696ea4fe61d66e3ed8", 0xe4}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x9403, 0x5, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'rose0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) mbind(&(0x7f00008d7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) mremap(&(0x7f0000905000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f00005ca000/0x3000)=nil) mlockall(0x3) 16:55:05 executing program 5: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@fault_injection={'fault_injection', 0x3d, 0x8503000000000000}}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000120001d7dff4de0000c00e0000a6f000", @ANYRES32, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007002000000000000005000000000000000108000500", @ANYRES32, @ANYBLOB="08000a00cd"], 0x60}}, 0x0) 16:55:05 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlockall(0x1)