0000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:50 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:50 executing program 0: r0 = socket(0x28, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) [ 283.015057][ T3673] usb 5-1: USB disconnect, device number 56 01:49:50 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x0, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:50 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 283.074545][ T7764] loop1: detected capacity change from 0 to 264192 [ 283.083084][ T7766] loop3: detected capacity change from 0 to 264192 01:49:50 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:50 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 283.153334][ T7764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.158742][ T7766] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 283.173121][ T7764] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 283.208128][ T7764] EXT4-fs (loop1): group descriptors corrupted! [ 283.221170][ T7766] EXT4-fs (loop3): group descriptors corrupted! 01:49:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) [ 283.483369][ T3673] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 283.733516][ T3673] usb 5-1: Using ep0 maxpacket: 8 [ 283.853408][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.864392][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 283.875490][ T3673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 283.885560][ T3673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.895513][ T3673] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.904582][ T3673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.922625][ T3673] usb 5-1: config 0 descriptor?? [ 284.183398][ T3673] usb 5-1: usb_control_msg returned -71 [ 284.189059][ T3673] usbtmc 5-1:0.0: can't read capabilities [ 284.209126][ T3673] usb 5-1: USB disconnect, device number 57 01:49:52 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 01:49:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:52 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:52 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000180)) 01:49:52 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xffffffffffffffe1, 0x0) 01:49:52 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 284.714892][ T7789] loop3: detected capacity change from 0 to 264192 [ 284.725675][ T7792] loop1: detected capacity change from 0 to 264192 01:49:52 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 284.756288][ T7789] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 284.775925][ T7789] EXT4-fs (loop3): group descriptors corrupted! [ 284.797736][ T7792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:49:52 executing program 0: r0 = socket(0x1e, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/200, 0xc8}], 0x1}, 0x0) 01:49:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:52 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 284.858196][ T7792] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 284.893879][ T7792] EXT4-fs (loop1): group descriptors corrupted! [ 284.971205][ T7806] loop3: detected capacity change from 0 to 264192 [ 285.024086][ T7806] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 285.033586][ T3675] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 285.055614][ T7806] EXT4-fs (loop3): group descriptors corrupted! [ 285.313369][ T3675] usb 5-1: Using ep0 maxpacket: 8 [ 285.443521][ T3675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.454499][ T3675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 285.467471][ T3675] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 285.477858][ T3675] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.488435][ T3675] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.497846][ T3675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.508227][ T3675] usb 5-1: config 0 descriptor?? [ 285.773355][ T3675] usb 5-1: usb_control_msg returned -71 [ 285.778964][ T3675] usbtmc 5-1:0.0: can't read capabilities [ 285.789730][ T3675] usb 5-1: USB disconnect, device number 58 01:49:53 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:53 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)='L') 01:49:53 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 01:49:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f00", 0x10, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:53 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2, {@in6=@empty, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0x128}}, 0x0) [ 286.314115][ T7813] loop1: detected capacity change from 0 to 264192 [ 286.324572][ T7816] loop3: detected capacity change from 0 to 264192 01:49:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 286.378192][ T7816] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 286.404260][ T7813] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:49:54 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 286.444144][ T7816] EXT4-fs (loop3): group descriptors corrupted! [ 286.462964][ T7813] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (5596!=0) 01:49:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2062, 0x0, 0x0) [ 286.488927][ T7813] EXT4-fs (loop1): group descriptors corrupted! 01:49:54 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000400)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f00", 0x10, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 286.603460][ T3676] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 286.643973][ T7834] loop1: detected capacity change from 0 to 264192 [ 286.674803][ T7836] loop3: detected capacity change from 0 to 264192 [ 286.689997][ T7834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.701992][ T7834] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (5596!=0) [ 286.703593][ T7836] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 286.712136][ T7834] EXT4-fs (loop1): group descriptors corrupted! [ 286.727097][ T7836] EXT4-fs (loop3): group descriptors corrupted! [ 286.794638][ T4096] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.809758][ T4098] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.853993][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 286.973461][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.984663][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 286.996411][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 287.006504][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.016603][ T3676] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.026056][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.036885][ T3676] usb 5-1: config 0 descriptor?? [ 287.293351][ T3676] usb 5-1: usb_control_msg returned -71 [ 287.299487][ T3676] usbtmc 5-1:0.0: can't read capabilities [ 287.311646][ T3676] usb 5-1: USB disconnect, device number 59 01:49:55 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:49:55 executing program 0: personality(0x5000007) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) 01:49:55 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000400)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:55 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f00", 0x10, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:55 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:55 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000400)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 287.834502][ T7845] loop1: detected capacity change from 0 to 264192 [ 287.857105][ T7848] loop3: detected capacity change from 0 to 264192 [ 287.881058][ T7845] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 287.892937][ T7845] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (5596!=0) 01:49:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 287.934357][ T7848] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) 01:49:55 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:55 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 287.986636][ T7845] EXT4-fs (loop1): group descriptors corrupted! [ 288.020268][ T7848] EXT4-fs (loop3): group descriptors corrupted! 01:49:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x800, 0x1, 0x0, 0x0, &(0x7f0000000040)=[{}]}) [ 288.113390][ T3676] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 288.353305][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 288.473323][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.484373][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 288.495690][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.505747][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.515705][ T3676] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.524878][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.543759][ T3676] usb 5-1: config 0 descriptor?? [ 288.803360][ T3676] usb 5-1: usb_control_msg returned -71 [ 288.808981][ T3676] usbtmc 5-1:0.0: can't read capabilities [ 288.819116][ T3676] usb 5-1: USB disconnect, device number 60 01:49:56 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:49:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:56 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000280)="17a260712d6e6c", 0x7}]) 01:49:56 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 289.316102][ T7865] loop3: detected capacity change from 0 to 264192 [ 289.342479][ T7866] loop1: detected capacity change from 0 to 264192 [ 289.355054][ T7865] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) 01:49:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x90) 01:49:57 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 289.428197][ T7865] EXT4-fs (loop3): group descriptors corrupted! [ 289.453387][ T7866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:49:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 289.518061][ T7866] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) 01:49:57 executing program 0: r0 = socket(0x1e, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 01:49:57 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 289.597916][ T7866] EXT4-fs (loop1): group descriptors corrupted! [ 289.616518][ T7881] loop3: detected capacity change from 0 to 264192 [ 289.651035][ T7881] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) [ 289.660996][ T3678] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 289.704886][ T7881] EXT4-fs (loop3): group descriptors corrupted! [ 289.903300][ T3678] usb 5-1: Using ep0 maxpacket: 8 [ 290.034232][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.045185][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 290.056263][ T3678] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 290.066706][ T3678] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.076819][ T3678] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.085949][ T3678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.101849][ T3678] usb 5-1: config 0 descriptor?? [ 290.373718][ T3678] usb 5-1: usb_control_msg returned -71 [ 290.379334][ T3678] usbtmc 5-1:0.0: can't read capabilities [ 290.393089][ T3678] usb 5-1: USB disconnect, device number 61 01:49:58 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:49:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:58 executing program 0: io_setup(0x7ff, &(0x7f0000000000)=0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 01:49:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:58 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:49:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 290.892516][ T7892] loop1: detected capacity change from 0 to 264192 [ 290.898988][ T7891] loop3: detected capacity change from 0 to 264192 01:49:58 executing program 0: syz_open_dev$media(&(0x7f0000000080), 0x8, 0x2242) [ 290.954807][ T7892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 290.964335][ T7891] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 290.975974][ T7892] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 291.055532][ T7892] EXT4-fs (loop1): group descriptors corrupted! [ 291.066411][ T7891] EXT4-fs (loop3): group descriptors corrupted! 01:49:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:49:58 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:49:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:49:58 executing program 0: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)=':\\\'(,,@.\x00', 0x0) [ 291.208416][ T7904] loop1: detected capacity change from 0 to 264192 [ 291.228211][ T7907] loop3: detected capacity change from 0 to 264192 [ 291.252319][ T7904] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 291.263374][ T3676] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 291.280263][ T7904] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 291.281294][ T7907] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 291.321868][ T7904] EXT4-fs (loop1): group descriptors corrupted! [ 291.345681][ T7907] EXT4-fs (loop3): group descriptors corrupted! [ 291.397815][ T4096] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 291.503323][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 291.623429][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.634608][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 291.646436][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 291.656824][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.667065][ T3676] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.676406][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.686822][ T3676] usb 5-1: config 0 descriptor?? [ 291.943388][ T3676] usb 5-1: usb_control_msg returned -71 [ 291.949002][ T3676] usbtmc 5-1:0.0: can't read capabilities [ 291.962440][ T3676] usb 5-1: USB disconnect, device number 62 01:50:00 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:50:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:00 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) 01:50:00 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:00 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) [ 292.469493][ T7920] loop1: detected capacity change from 0 to 264192 [ 292.470754][ T7921] loop3: detected capacity change from 0 to 264192 [ 292.504627][ T7920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 292.556137][ T7920] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 292.575689][ T7921] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) 01:50:00 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) 01:50:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 292.603418][ T7920] EXT4-fs (loop1): group descriptors corrupted! 01:50:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 292.651473][ T7921] EXT4-fs (loop3): group descriptors corrupted! [ 292.750147][ T3803] I/O error, dev loop3, sector 261104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 292.765469][ T7935] loop1: detected capacity change from 0 to 264192 [ 292.798420][ T7935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 292.803535][ T3686] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 292.813911][ T7935] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 292.852703][ T7935] EXT4-fs (loop1): group descriptors corrupted! [ 292.916640][ T4096] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 293.063755][ T3686] usb 5-1: Using ep0 maxpacket: 8 [ 293.186081][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.197178][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 293.208419][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 293.218589][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.228627][ T3686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.239276][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.252518][ T3686] usb 5-1: config 0 descriptor?? [ 293.503385][ T3686] usb 5-1: usb_control_msg returned -71 [ 293.509014][ T3686] usbtmc 5-1:0.0: can't read capabilities [ 293.526634][ T3686] usb 5-1: USB disconnect, device number 63 [ 293.538442][ T4096] udevd[4096]: setting mode of /dev/usbtmc0 to 020600 failed: No such file or directory [ 293.550678][ T4096] udevd[4096]: setting owner of /dev/usbtmc0 to uid=0, gid=0 failed: No such file or directory 01:50:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:01 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x0) 01:50:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:01 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:50:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:01 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 294.054867][ T7943] loop3: detected capacity change from 0 to 264192 [ 294.064987][ T7945] loop1: detected capacity change from 0 to 264192 01:50:01 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) [ 294.138065][ T7943] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 294.155778][ T7945] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 294.181209][ T7943] EXT4-fs (loop3): group descriptors corrupted! 01:50:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:01 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) [ 294.195829][ T7945] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 294.230463][ T7945] EXT4-fs (loop1): group descriptors corrupted! 01:50:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:01 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) 01:50:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:01 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) [ 294.366286][ T7959] loop3: detected capacity change from 0 to 264192 [ 294.384661][ T7961] loop1: detected capacity change from 0 to 264192 [ 294.403558][ T3686] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 294.431980][ T7961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 294.451673][ T7959] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 294.479851][ T7961] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) [ 294.493977][ T7961] EXT4-fs (loop1): group descriptors corrupted! [ 294.508252][ T7959] EXT4-fs (loop3): group descriptors corrupted! [ 294.588816][ T4096] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.609937][ T4096] Buffer I/O error on dev loop3, logical block 0, async page read [ 294.643532][ T4096] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.652895][ T4096] Buffer I/O error on dev loop3, logical block 3, async page read [ 294.683520][ T3686] usb 5-1: Using ep0 maxpacket: 8 [ 294.823923][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.835055][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 294.846196][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 294.856446][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.866527][ T3686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.875825][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.895977][ T3686] usb 5-1: config 0 descriptor?? [ 295.143472][ T3686] usb 5-1: usb_control_msg returned -71 [ 295.149119][ T3686] usbtmc 5-1:0.0: can't read capabilities [ 295.171333][ T3686] usb 5-1: USB disconnect, device number 64 01:50:03 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:50:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e0000000200001"], 0xe0}}, 0x0) 01:50:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:03 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 295.669607][ T7973] loop3: detected capacity change from 0 to 264192 [ 295.669659][ T7975] loop1: detected capacity change from 0 to 264192 [ 295.681387][ T7976] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. 01:50:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 295.716727][ T7975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.752432][ T7975] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) 01:50:03 executing program 0: set_mempolicy(0x1, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 01:50:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 295.792183][ T7975] EXT4-fs (loop1): group descriptors corrupted! [ 295.814416][ T7973] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:50:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 295.855990][ T7973] EXT4-fs (loop3): group descriptors corrupted! 01:50:03 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000180)) 01:50:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 295.916658][ T4096] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.958285][ T4096] Buffer I/O error on dev loop3, logical block 0, async page read [ 295.967357][ T7989] loop1: detected capacity change from 0 to 264192 [ 295.992533][ T4096] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.005140][ T3686] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 296.024661][ T4096] Buffer I/O error on dev loop3, logical block 3, async page read [ 296.067905][ T7989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 296.085007][ T7989] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) [ 296.101772][ T7989] EXT4-fs (loop1): group descriptors corrupted! [ 296.273443][ T3686] usb 5-1: Using ep0 maxpacket: 8 [ 296.423470][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.434575][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 296.446067][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.456175][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.466258][ T3686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.475453][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.495565][ T3686] usb 5-1: config 0 descriptor?? [ 296.753417][ T3686] usb 5-1: usb_control_msg returned -71 [ 296.759140][ T3686] usbtmc 5-1:0.0: can't read capabilities [ 296.782204][ T3686] usb 5-1: USB disconnect, device number 65 01:50:04 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 01:50:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:04 executing program 0: select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x9}, &(0x7f0000000100)) 01:50:04 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:04 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:04 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 01:50:04 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 297.283694][ T8002] loop3: detected capacity change from 0 to 264192 [ 297.284038][ T7999] loop1: detected capacity change from 0 to 264192 [ 297.360792][ T7999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 297.370201][ T7999] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 297.381270][ T7999] EXT4-fs (loop1): group descriptors corrupted! 01:50:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:05 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 297.408522][ T8002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 01:50:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/74) [ 297.481734][ T8012] loop1: detected capacity change from 0 to 264192 [ 297.524073][ T8012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 297.574501][ T8017] loop3: detected capacity change from 0 to 264192 [ 297.577539][ T8012] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 297.593488][ T3686] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 297.623394][ T8012] EXT4-fs (loop1): group descriptors corrupted! [ 297.652567][ T8017] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.893334][ T3686] usb 5-1: Using ep0 maxpacket: 8 [ 298.043447][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.056432][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 298.067716][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 298.077852][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.087924][ T3686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.097384][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.121399][ T3686] usb 5-1: config 0 descriptor?? [ 298.383562][ T3686] usb 5-1: GET_CAPABILITIES returned 0 [ 298.389095][ T3686] usbtmc 5-1:0.0: can't read capabilities [ 298.587426][ T3676] usb 5-1: USB disconnect, device number 66 01:50:06 executing program 0: r0 = socket(0x28, 0x2, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 01:50:06 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:06 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 01:50:06 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_LLSEC_KEY_MODE, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_LLSEC_KEY_ID]}, 0x8f}}, 0x0) 01:50:06 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) [ 299.135847][ T8026] loop1: detected capacity change from 0 to 264192 [ 299.135938][ T8031] loop3: detected capacity change from 0 to 264192 01:50:06 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) [ 299.210253][ T8026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.219754][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 01:50:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000140)=@acquire={0x130, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2, {@in6=@empty, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0, 0x0, 0x0, 0xee01}}}, [@XFRMA_SET_MARK_MASK={0x8}]}, 0x130}}, 0x0) [ 299.266238][ T8026] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 299.303095][ T8031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 01:50:06 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) [ 299.313093][ T8026] EXT4-fs (loop1): group descriptors corrupted! 01:50:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:06 executing program 0: syz_open_dev$media(&(0x7f0000000040), 0x0, 0x4042) 01:50:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:07 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 299.413432][ T3686] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 299.436895][ T8046] loop1: detected capacity change from 0 to 264192 [ 299.479959][ T8046] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:07 executing program 0: set_mempolicy(0x4001, &(0x7f0000000100)=0x7, 0x4fe2) [ 299.527961][ T8046] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 299.552006][ T8052] loop3: detected capacity change from 0 to 264192 [ 299.584335][ T8046] EXT4-fs (loop1): group descriptors corrupted! [ 299.621514][ T8052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 299.673296][ T3686] usb 5-1: Using ep0 maxpacket: 8 [ 299.803504][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.816083][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 299.827564][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 299.844887][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.860066][ T3686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.870816][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.883949][ T3686] usb 5-1: config 0 descriptor?? [ 300.163463][ T3686] usb 5-1: GET_CAPABILITIES returned 0 [ 300.169269][ T3686] usbtmc 5-1:0.0: can't read capabilities [ 300.375340][ T3686] usb 5-1: USB disconnect, device number 67 01:50:08 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 01:50:08 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:08 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private}}}}) 01:50:08 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:08 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:50:08 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) [ 300.894290][ T8060] loop3: detected capacity change from 0 to 264192 [ 300.913960][ T8061] loop1: detected capacity change from 0 to 264192 01:50:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), 0x10) 01:50:08 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) [ 301.003947][ T8061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.025179][ T8061] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 301.052291][ T8060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 301.064567][ T8061] EXT4-fs (loop1): group descriptors corrupted! 01:50:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000022c0)='rxrpc\x00', 0x0, &(0x7f0000002300)="163a3ff861407d26f587d3039543c4c332b5fdb9902bbba4798f6ac8e2", 0x1d, r0) 01:50:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 301.202836][ T8082] loop1: detected capacity change from 0 to 264192 [ 301.233899][ T8082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.254643][ T3673] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 301.257857][ T8082] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 301.295216][ T8082] EXT4-fs (loop1): group descriptors corrupted! [ 301.503270][ T3673] usb 5-1: Using ep0 maxpacket: 8 [ 301.643376][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.654563][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 301.666098][ T3673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 301.676536][ T3673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.686750][ T3673] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.696613][ T3673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.712808][ T3673] usb 5-1: config 0 descriptor?? [ 301.973472][ T3673] usb 5-1: GET_CAPABILITIES returned 0 [ 301.979063][ T3673] usbtmc 5-1:0.0: can't read capabilities [ 302.178544][ T6] usb 5-1: USB disconnect, device number 68 01:50:10 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) 01:50:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:10 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000000)={0x3e2}, 0x0) 01:50:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:10 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x0, 0x0}) 01:50:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x6) 01:50:10 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) [ 302.723547][ T8091] loop3: detected capacity change from 0 to 264192 [ 302.733019][ T8092] loop1: detected capacity change from 0 to 264192 01:50:10 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000640), 0xffffffffffffffff, 0x200000) 01:50:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)='j', 0x1}], 0x1}}], 0x1, 0x0) 01:50:10 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 302.816495][ T8092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 302.841825][ T8091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 01:50:10 executing program 4: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 01:50:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 302.880276][ T8092] EXT4-fs (loop1): unsupported descriptor size 0 01:50:10 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 01:50:10 executing program 0: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) [ 302.938615][ T3803] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 01:50:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 302.980193][ T3803] Buffer I/O error on dev loop1, logical block 0, async page read [ 303.019496][ T3803] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.061143][ T3803] Buffer I/O error on dev loop1, logical block 2, async page read [ 303.083579][ T3803] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 303.118754][ T3803] Buffer I/O error on dev loop1, logical block 3, async page read [ 303.134292][ T8115] loop1: detected capacity change from 0 to 264192 [ 303.151550][ T8115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 303.154863][ T8117] loop3: detected capacity change from 0 to 264192 [ 303.198741][ T8117] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 303.229450][ T8115] EXT4-fs (loop1): unsupported descriptor size 0 01:50:11 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:11 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000001080)={0x80000000, 0x0, &(0x7f0000001000)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000010c0)={r2, 0x0, &(0x7f0000000f80)}) 01:50:11 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 01:50:11 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="a6", 0x1}], 0x1}], 0x1, 0x0) 01:50:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x4002000) 01:50:11 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 01:50:11 executing program 0: set_mempolicy(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 303.574547][ T8125] loop1: detected capacity change from 0 to 264192 [ 303.586081][ T8127] loop3: detected capacity change from 0 to 264192 01:50:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 303.660468][ T8127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 303.677896][ T8125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 303.691523][ T8125] EXT4-fs (loop1): unsupported descriptor size 0 01:50:11 executing program 0: io_setup(0x7ff, &(0x7f0000000000)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)="d4", 0x1}]) 01:50:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000021c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='o', 0x1}], 0x1}], 0x1, 0x0) 01:50:12 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004840)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)='z', 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0) 01:50:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffffffd}}, 0x0) 01:50:12 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x4002000) 01:50:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2, {@in6=@empty, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, [@tmpl={0x44, 0x5, [{{@in6=@dev}, 0x0, @in=@remote, 0x0, 0x1}]}]}, 0x16c}}, 0x0) [ 304.522838][ T8152] loop1: detected capacity change from 0 to 264192 [ 304.530751][ T8153] loop3: detected capacity change from 0 to 264192 [ 304.577281][ T8152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.608732][ T8152] EXT4-fs (loop1): unsupported descriptor size 0 01:50:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 304.640322][ T8153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 01:50:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x4002000) 01:50:12 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="580000000000000029000000390000000008000000000000fe8000000000000000000000000000bbfe8000000000000000aaff010000000000000000000000000001fe880000000000000000000000000001140000000000000029"], 0x70}}], 0x1, 0x0) [ 304.770525][ T8164] loop1: detected capacity change from 0 to 264192 [ 304.811533][ T8168] loop3: detected capacity change from 0 to 264192 [ 304.901043][ T8164] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.928995][ T8168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.984696][ T8164] EXT4-fs (loop1): unsupported descriptor size 0 01:50:12 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x202000, 0x0) select(0x40, &(0x7f0000000480), &(0x7f00000004c0)={0xb08}, &(0x7f0000000500)={0x10d}, 0x0) 01:50:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000002d80)=ANY=[@ANYBLOB="100000001d002b"], 0x10}}, 0x0) 01:50:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x4002000) 01:50:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:13 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0xa82) 01:50:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:50:13 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x5daf3de0af5a9395) [ 305.450806][ T8179] loop1: detected capacity change from 0 to 264192 [ 305.458706][ T8181] loop3: detected capacity change from 0 to 264192 [ 305.521877][ T8179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 305.555307][ T8179] EXT4-fs (loop1): unsupported descriptor size 0 [ 305.562971][ T8181] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 01:50:13 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080), 0x6e, 0x0}, 0x0) 01:50:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:13 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0xa0e, 0xfe) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 01:50:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 305.704968][ T8195] loop1: detected capacity change from 0 to 264192 [ 305.753797][ T8195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 305.763216][ T8195] EXT4-fs (loop1): unsupported descriptor size 0 [ 305.832055][ T8199] loop3: detected capacity change from 0 to 264192 [ 305.846152][ T8199] EXT4-fs (loop3): unsupported descriptor size 0 [ 305.911829][ T3643] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:13 executing program 2: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1) 01:50:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x3, &(0x7f00000001c0), 0x4) 01:50:13 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0xa0e, 0xfe) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 01:50:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:13 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0xa0e, 0xfe) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) [ 306.350623][ T8207] loop3: detected capacity change from 0 to 264192 [ 306.364306][ T8208] loop1: detected capacity change from 0 to 264192 01:50:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00010000190001000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000000000000000000002"], 0x100}}, 0x0) 01:50:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) [ 306.425418][ T8208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.444299][ T8207] EXT4-fs (loop3): unsupported descriptor size 0 01:50:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 306.477840][ T8208] EXT4-fs (loop1): unsupported descriptor size 0 01:50:14 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0xa0e, 0xfe) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 01:50:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 306.531939][ T8216] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.597370][ T8220] loop3: detected capacity change from 0 to 264192 [ 306.638467][ T8220] EXT4-fs (loop3): unsupported descriptor size 0 [ 306.665792][ T8224] loop1: detected capacity change from 0 to 264192 [ 306.688163][ T4096] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 306.701356][ T8224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.734621][ T8224] EXT4-fs (loop1): unsupported descriptor size 0 01:50:14 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:14 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 01:50:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}}, 0x0) 01:50:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:14 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) [ 307.314015][ T8231] loop3: detected capacity change from 0 to 264192 [ 307.324923][ T8233] loop1: detected capacity change from 0 to 264192 01:50:14 executing program 2: socket(0x1, 0x0, 0x26d) [ 307.365881][ T8233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 307.383720][ T8231] EXT4-fs (loop3): unsupported descriptor size 0 01:50:15 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000180)) 01:50:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:15 executing program 4: socket(0x2, 0x0, 0x9ab) [ 307.444289][ T8233] EXT4-fs (loop1): unsupported descriptor size 0 01:50:15 executing program 2: r0 = socket(0x10, 0x2, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="a6", 0x1}], 0x1}], 0x1, 0x0) [ 307.526068][ T8245] loop3: detected capacity change from 0 to 264192 [ 307.571682][ T8245] EXT4-fs (loop3): unsupported descriptor size 0 01:50:15 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000080), 0x10) 01:50:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:15 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:15 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3e2}, &(0x7f0000000140)) 01:50:15 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="a6", 0x1}], 0x26, 0x0, 0xb, 0x10}], 0x1, 0x0) 01:50:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:15 executing program 0: syz_open_dev$usbfs(&(0x7f0000000200), 0x0, 0x0) [ 308.290216][ T8257] loop1: detected capacity change from 0 to 264192 [ 308.308534][ T8259] loop3: detected capacity change from 0 to 264192 01:50:15 executing program 2: msgsnd(0x0, &(0x7f00000012c0)=ANY=[], 0x1008, 0x0) 01:50:15 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) [ 308.353348][ T8257] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:15 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/237, 0xed}], 0x1, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/144, 0x90}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 01:50:16 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="a6", 0x1}, {&(0x7f0000000940)="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", 0xec0}], 0x2}], 0x1, 0x0) [ 308.438110][ T8257] EXT4-fs (loop1): unsupported descriptor size 0 01:50:16 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x28, 0x0, 0x0, "d7d05ffe3444c63704a3adc6585536b252"}, 0x28}, 0x0) 01:50:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="89", 0x1, r0) keyctl$read(0xb, r0, &(0x7f0000000140)=""/232, 0xe8) [ 308.567028][ T8259] EXT4-fs (loop3): unsupported descriptor size 0 01:50:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='l'], 0x16c}}, 0x0) [ 308.662049][ T4096] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:16 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:16 executing program 2: clock_getres(0xc890295a92c8ff9d, 0x0) 01:50:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b", 0x18, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:16 executing program 4: select(0x7b, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) 01:50:16 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 01:50:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:16 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) 01:50:16 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) [ 309.187330][ T8285] loop1: detected capacity change from 0 to 264192 [ 309.195650][ T8288] loop3: detected capacity change from 0 to 264192 01:50:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 309.251649][ T8288] EXT4-fs (loop3): unsupported descriptor size 0 [ 309.277515][ T8285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:16 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}, {0x0, 0x0, 0x0}], 0x2, 0x0) [ 309.332800][ T8285] EXT4-fs (loop1): unsupported descriptor size 0 01:50:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 01:50:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b", 0x18, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 309.448141][ T8299] loop3: detected capacity change from 0 to 264192 [ 309.493820][ T8299] EXT4-fs (loop3): unsupported descriptor size 0 [ 309.527196][ T8303] loop1: detected capacity change from 0 to 264192 [ 309.550783][ T8303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 309.565842][ T8303] EXT4-fs (loop1): unsupported descriptor size 0 01:50:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 01:50:17 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b", 0x18, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:17 executing program 4: socket(0x2b, 0x1, 0xfffffff8) 01:50:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000a80)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="11", 0x1}], 0x1, &(0x7f0000000300)=[@init={0x18}], 0x18}], 0x1, 0x0) 01:50:17 executing program 4: select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) [ 310.096467][ T8310] loop3: detected capacity change from 0 to 264192 [ 310.105994][ T8307] loop1: detected capacity change from 0 to 264192 01:50:17 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3e2}, 0x0) 01:50:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045", 0x1c, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 310.250763][ T8307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.260173][ T8310] EXT4-fs (loop3): unsupported descriptor size 0 [ 310.272966][ T8307] EXT4-fs (loop1): unsupported descriptor size 0 01:50:17 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:50:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x4011) [ 310.427489][ T8327] loop1: detected capacity change from 0 to 264192 [ 310.457101][ T8327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.473795][ T8329] loop3: detected capacity change from 0 to 264192 [ 310.510183][ T8327] EXT4-fs (loop1): unsupported descriptor size 0 [ 310.531487][ T8329] EXT4-fs (loop3): unsupported descriptor size 0 01:50:18 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x7ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x1, &(0x7f0000000040)=[{}], 0x0) 01:50:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045", 0x1c, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:18 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 01:50:18 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000000c0)) 01:50:18 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0xd01f6785580db248) [ 311.027561][ T8339] loop3: detected capacity change from 0 to 264192 [ 311.035094][ T8340] loop1: detected capacity change from 0 to 264192 [ 311.051378][ T8339] EXT4-fs (loop3): unsupported descriptor size 0 01:50:18 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x6c}}, 0x0) 01:50:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 311.085555][ T8340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045", 0x1c, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 311.126414][ T8340] EXT4-fs (loop1): unsupported descriptor size 0 01:50:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:18 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, 0x0}, 0x0) [ 311.268221][ T8352] loop1: detected capacity change from 0 to 264192 [ 311.280344][ T8356] loop3: detected capacity change from 0 to 264192 [ 311.299369][ T8352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 311.310963][ T8356] EXT4-fs (loop3): unsupported descriptor size 0 [ 311.323122][ T8352] EXT4-fs (loop1): unsupported descriptor size 0 [ 311.356281][ T4096] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 311.389529][ T3803] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:19 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:19 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10121) 01:50:19 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) 01:50:19 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x0, 0x40, '\x00', [@ra]}, 0x10) 01:50:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:19 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0) 01:50:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 311.912619][ T8363] loop1: detected capacity change from 0 to 264192 [ 311.923489][ T8364] loop3: detected capacity change from 0 to 264192 01:50:19 executing program 4: r0 = socket(0x15, 0x5, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) 01:50:19 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000180)) 01:50:19 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x80, 0x200000) [ 311.994865][ T8364] EXT4-fs (loop3): unsupported descriptor size 0 [ 312.014691][ T8363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 312.093331][ T8363] EXT4-fs (loop1): unsupported descriptor size 0 [ 312.180668][ T8381] loop3: detected capacity change from 0 to 264192 [ 312.201594][ T8381] EXT4-fs (loop3): unsupported descriptor size 0 01:50:20 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:20 executing program 4: set_mempolicy(0x0, &(0x7f0000000000), 0x101) 01:50:20 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x202000, 0x0) select(0x40, &(0x7f0000000480), &(0x7f00000004c0)={0xb08}, 0x0, 0x0) 01:50:20 executing program 2: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0}) 01:50:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:20 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000001740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:50:20 executing program 4: syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x0) 01:50:20 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) [ 312.865259][ T8390] loop3: detected capacity change from 0 to 264192 [ 312.882180][ T8391] loop1: detected capacity change from 0 to 264192 01:50:20 executing program 4: syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x0) 01:50:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 312.943374][ T8390] EXT4-fs (loop3): unsupported descriptor size 0 [ 312.954446][ T8398] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 312.961660][ T8391] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:20 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) [ 313.041396][ T8391] EXT4-fs (loop1): unsupported descriptor size 0 [ 313.102679][ T8406] loop3: detected capacity change from 0 to 264192 [ 313.198615][ T8406] EXT4-fs (loop3): unsupported descriptor size 0 01:50:21 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:21 executing program 0: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0xe63be86485798516) 01:50:21 executing program 4: syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x0) 01:50:21 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f00000027c0)='keyring\x00', &(0x7f0000002800)={'syz', 0x1}, &(0x7f0000002840)='^$\'\x00', 0x0) 01:50:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:21 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) 01:50:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={0x0, 0x10}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) [ 313.805203][ T8417] loop3: detected capacity change from 0 to 264192 [ 313.806551][ T8418] loop1: detected capacity change from 0 to 264192 01:50:21 executing program 4: syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x0) [ 313.865042][ T8417] EXT4-fs (loop3): unsupported descriptor size 0 01:50:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x5}}) 01:50:21 executing program 2: r0 = socket(0x28, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) [ 313.907662][ T8418] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 313.996781][ T8418] EXT4-fs (loop1): unsupported descriptor size 0 [ 314.057898][ T8432] loop3: detected capacity change from 0 to 264192 [ 314.088421][ T8432] EXT4-fs (loop3): unsupported descriptor size 0 01:50:22 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:22 executing program 4: socket$tipc(0x1e, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000740)) select(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000700)={0x9}, 0x0) 01:50:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x7ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) 01:50:22 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000780)={0x80000000, &(0x7f00000006c0)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000a40)={r1, 0x0, 0x0}) 01:50:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:22 executing program 2: socket$l2tp(0x2, 0x2, 0x73) clock_gettime(0x0, &(0x7f0000000740)={0x0}) select(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000700)={0x9}, &(0x7f0000000780)={r0}) [ 314.695919][ T8439] loop1: detected capacity change from 0 to 264192 [ 314.696114][ T8440] loop3: detected capacity change from 0 to 264192 [ 314.753525][ T8440] EXT4-fs (loop3): unsupported descriptor size 0 [ 314.758710][ T8439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:22 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3e2}, 0x0) 01:50:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000022c0)='rxrpc\x00', 0x0, &(0x7f0000002300)="163a3ff861", 0x5, r0) [ 314.808996][ T8439] EXT4-fs (loop1): unsupported descriptor size 0 01:50:22 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 01:50:22 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xffffffffffff1f4f, 0x41) [ 314.911302][ T8452] loop3: detected capacity change from 0 to 264192 [ 314.925054][ T4096] I/O error, dev loop1, sector 261104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 314.962047][ T8452] EXT4-fs (loop3): unsupported descriptor size 0 01:50:23 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:23 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r2, 0x3, &(0x7f0000001740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x80000001}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="f8238d9b1ca0", 0x6}]) 01:50:23 executing program 4: set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffc, 0x8) [ 315.575385][ T8461] loop1: detected capacity change from 0 to 264192 [ 315.589877][ T8464] loop3: detected capacity change from 0 to 264192 [ 315.611938][ T8461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:23 executing program 4: io_setup(0x7ff, &(0x7f0000000000)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 01:50:23 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f00000081c0)={0x0, 0x0, 0x0}, 0x4048045) 01:50:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 315.621113][ T8464] EXT4-fs (loop3): unsupported descriptor size 0 [ 315.631267][ T8461] EXT4-fs (loop1): unsupported descriptor size 0 01:50:23 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000180)) 01:50:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xfffffffffffffef6, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xbc}}, 0x0) 01:50:23 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000000)) [ 315.790773][ T8474] loop3: detected capacity change from 0 to 264192 [ 315.830185][ T8477] loop1: detected capacity change from 0 to 264192 [ 315.885687][ T8477] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 315.914928][ T8474] EXT4-fs (loop3): unsupported descriptor size 0 [ 315.934112][ T8477] EXT4-fs (loop1): unsupported descriptor size 0 [ 315.999207][ T3803] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.019423][ T3803] Buffer I/O error on dev loop3, logical block 0, async page read [ 316.034961][ T3803] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.051922][ T3803] Buffer I/O error on dev loop3, logical block 2, async page read [ 316.070082][ T3803] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.082414][ T3803] Buffer I/O error on dev loop3, logical block 3, async page read 01:50:24 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 01:50:24 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x141, 0x0, 0x0) 01:50:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "f5ae33052ca0af10f09eefd7849e56f7603d75ef66a7f4787ae060bc60e68daf"}]}, 0xffffff7d}}, 0x0) 01:50:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:24 executing program 0: socketpair(0x2, 0x3, 0xe4, 0x0) 01:50:24 executing program 2: syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0x0) [ 316.455516][ T8489] loop1: detected capacity change from 0 to 264192 [ 316.473125][ T8492] loop3: detected capacity change from 0 to 264192 01:50:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 316.515290][ T8492] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 316.543560][ T8489] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:24 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[], 0x70}}], 0x1, 0x0) 01:50:24 executing program 2: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='@[(-)\x00', 0xfffffffffffffffe) 01:50:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 316.706950][ T8502] loop3: detected capacity change from 0 to 264192 [ 316.729012][ T8507] loop1: detected capacity change from 0 to 264192 [ 316.788067][ T8502] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 316.805877][ T8507] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 316.913106][ T4096] I/O error, dev loop3, sector 261104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 316.935123][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.941480][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 01:50:24 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:50:24 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0}) select(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000700)={0x9}, &(0x7f0000000780)={r0}) 01:50:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}}, @in6=@private2, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, [@tmpl={0x44, 0x5, [{{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@dev}]}]}, 0x16c}}, 0x0) 01:50:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) select(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000700)={0x9}, &(0x7f0000000780)={0x0, r0/1000+10000}) 01:50:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000170001000000000000000000fc0000000000000000000000000000000000000000000000fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D'], 0x16c}}, 0x0) [ 317.449976][ T8515] loop1: detected capacity change from 0 to 264192 [ 317.479667][ T8517] loop3: detected capacity change from 0 to 264192 [ 317.537109][ T8517] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 317.555437][ T8515] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000170001000000000000000000fc0000000000000000000000000000000000000000000000fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D'], 0x16c}}, 0x0) 01:50:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:25 executing program 2: request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0) 01:50:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 317.702471][ T8532] loop1: detected capacity change from 0 to 264192 [ 317.729841][ T8533] loop3: detected capacity change from 0 to 264192 [ 317.765803][ T8533] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 317.772603][ T8532] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:25 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000170001000000000000000000fc0000000000000000000000000000000000000000000000fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D'], 0x16c}}, 0x0) 01:50:25 executing program 2: request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='logon\x00', 0x0) 01:50:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x44}}, 0x0) 01:50:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000a80)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="11", 0x1}], 0x1, &(0x7f0000000300)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xb}}], 0x30}], 0x1, 0x0) 01:50:25 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0) 01:50:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000170001000000000000000000fc0000000000000000000000000000000000000000000000fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D'], 0x16c}}, 0x0) [ 318.369773][ T8541] loop3: detected capacity change from 0 to 264192 [ 318.371842][ T8540] loop1: detected capacity change from 0 to 264192 [ 318.443395][ T8541] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 318.447239][ T8540] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 318.608117][ T8554] loop3: detected capacity change from 0 to 264192 [ 318.641983][ T8554] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 318.654934][ T8558] loop1: detected capacity change from 0 to 264192 [ 318.673620][ T8558] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:26 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4002000) 01:50:26 executing program 0: select(0x95, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) 01:50:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 319.277150][ T8564] loop1: detected capacity change from 0 to 264192 [ 319.284422][ T8565] loop3: detected capacity change from 0 to 264192 01:50:26 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0) [ 319.331725][ T8565] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 319.363234][ T8564] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:27 executing program 4: r0 = socket(0x11, 0x2, 0x0) accept$unix(r0, 0x0, 0x0) 01:50:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x4, 0x7, 0x6953, 0x9}, 0x8) 01:50:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000140)=@acquire={0x130, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2, {@in6=@empty, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0, 0x0, 0x0, 0xee01}}}, [@XFRMA_SET_MARK_MASK={0x8}]}, 0x130}}, 0x0) 01:50:27 executing program 2: request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0) [ 319.498698][ T8576] loop1: detected capacity change from 0 to 264192 [ 319.533418][ T8576] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 319.541166][ T8579] loop3: detected capacity change from 0 to 264192 [ 319.663755][ T8579] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:50:27 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:27 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0xd71a, 0x4) 01:50:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:27 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3e2}, 0x0) 01:50:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)}], 0x2, 0x0) 01:50:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x7ff, &(0x7f0000000000)=0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x204100, 0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) [ 320.158951][ T8589] loop3: detected capacity change from 0 to 264192 [ 320.170622][ T8591] loop1: detected capacity change from 0 to 264192 01:50:27 executing program 2: r0 = socket(0x1e, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 01:50:27 executing program 0: msgctl$MSG_STAT(0x0, 0xb, 0xfffffffffffffffc) [ 320.210223][ T8591] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:27 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 320.264307][ T8589] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:50:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 320.398941][ T8606] loop3: detected capacity change from 0 to 264192 [ 320.414713][ T8608] loop1: detected capacity change from 0 to 264192 [ 320.425560][ T8606] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 320.439690][ T8608] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 320.500062][ T3803] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:28 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:28 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000001dc0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0083e23cb2"]}) 01:50:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000000)=@flushpolicy={0xfffffffffffffe7a, 0x1d, 0x0, 0x0, 0x0, "", [@tfcpad, @extra_flags, @replay_esn_val={0x0, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, @algo_comp={0x0, 0x3, {{'lzs\x00'}, 0x0, "da320e7a622f4a6da461a00272c9a08b857a2381b1830b5429607a132f950931f80d6410f39daf67c6efad13dcc37b55791e6d617ff332494a6f1e29fce2540bc1853f4463be50c1251442"}}, @algo_auth={0x0, 0x1, {{'blake2b-512\x00'}, 0x0, "28f433ca3e51327ef46b363b08a49aa114675ae82499d82cb627bcc9d6a000913743ad6c2b11f5af1069312aa1f77db4e605151878fe172a4d4387124f03d8137bf29b175b815769e32737b22a7329aaac696fe2cce4b310afec478c8982d231e12cc3dcc73031d654d3e153d1f63f5aa2851be448294d96b18adbe7e45ed574bf552d6bff0528b7647761a310340b6438036d455ccd717e8537af292a5d6b876e31332aea10a414dad711c147c2c2653bd3785a07805fbcc2088c16f141db992728b9fb59f8ca2cc098f81d3cc3b7dc5f13561f78a43590773355511e1b4181f96a7decdd3e02d4d889"}}, @address_filter={0x0, 0x1a, {@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @XFRMA_SET_MARK_MASK]}, 0x10}}, 0x0) 01:50:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)) 01:50:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) 01:50:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4002000) [ 321.120144][ T8613] loop1: detected capacity change from 0 to 264192 [ 321.131927][ T8617] loop3: detected capacity change from 0 to 264192 01:50:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x40}}, 0x0) 01:50:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 321.210561][ T8617] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 321.210654][ T8613] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:28 executing program 2: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000010c0)={'erspan0\x00', 0x0}) 01:50:28 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000680)={0xe8b}, 0x0, 0x0, 0x0) [ 321.361003][ T4096] I/O error, dev loop1, sector 261104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 321.396309][ T8633] loop3: detected capacity change from 0 to 264192 [ 321.440644][ T8633] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:50:29 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:29 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}}, 0x0) 01:50:29 executing program 2: r0 = socket(0x11, 0x2, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10103, 0x0, 0x0) 01:50:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x5}, 0x14}}, 0x0) 01:50:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:29 executing program 0: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, r1+10000000}}, 0x0) 01:50:29 executing program 2: select(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) [ 322.018881][ T8640] loop3: detected capacity change from 0 to 264192 [ 322.035543][ T8643] loop1: detected capacity change from 0 to 264192 01:50:29 executing program 4: request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0) [ 322.117010][ T8643] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:29 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xfffffffffffffffb) 01:50:29 executing program 4: keyctl$dh_compute(0x17, &(0x7f00000015c0), 0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={'michael_mic-generic\x00'}}) 01:50:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "40a9fe", 0x7}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 322.171520][ T8640] EXT4-fs (loop3): invalid first ino: 0 [ 322.317114][ T4096] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.338431][ T4096] Buffer I/O error on dev loop3, logical block 0, async page read [ 322.356934][ T4096] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.372618][ T4096] Buffer I/O error on dev loop3, logical block 2, async page read [ 322.380775][ T4096] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 322.393400][ T4096] Buffer I/O error on dev loop3, logical block 3, async page read 01:50:30 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a0f0000", @ANYRES32=r0, @ANYBLOB="140002"], 0x2c}}, 0x0) 01:50:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 01:50:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:30 executing program 2: r0 = socket(0x26, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 01:50:30 executing program 4: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback, 0x6}}, 0x0, 0x8}, &(0x7f00000002c0)=0x90) io_setup(0x9, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) [ 322.949491][ T8666] loop3: detected capacity change from 0 to 264192 [ 322.961695][ T8665] loop1: detected capacity change from 0 to 264192 01:50:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)) 01:50:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 323.058690][ T8666] EXT4-fs (loop3): invalid first ino: 0 [ 323.059362][ T8665] EXT4-fs (loop1): invalid first ino: 0 01:50:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:30 executing program 0: set_mempolicy(0x2, &(0x7f0000000000)=0xa92, 0x7d) 01:50:30 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}, {&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, 0x0}], 0x2, 0x0) [ 323.213892][ T8680] loop1: detected capacity change from 0 to 264192 [ 323.217559][ T8682] loop3: detected capacity change from 0 to 264192 [ 323.226779][ T8680] EXT4-fs (loop1): invalid first ino: 0 [ 323.248601][ T8682] EXT4-fs (loop3): invalid first ino: 0 [ 323.292978][ T3803] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 323.315407][ T4096] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:31 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x0, "d97f9c", 0x20}) 01:50:31 executing program 4: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 01:50:31 executing program 0: r0 = socket(0x1e, 0x2, 0x0) recvfrom$llc(r0, &(0x7f0000001080)=""/107, 0x6b, 0x0, 0x0, 0x0) 01:50:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:31 executing program 4: r0 = socket(0x2, 0x6, 0x0) bind$netlink(r0, 0x0, 0x0) [ 323.837888][ T8691] loop3: detected capacity change from 0 to 264192 [ 323.849091][ T8694] loop1: detected capacity change from 0 to 264192 [ 323.877553][ T8691] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) 01:50:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 323.932240][ T8694] EXT4-fs (loop1): invalid first ino: 0 01:50:31 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "0f937e05c0ab76128f9b7486b301f9fd864cd4bf75aedc0d9149c2eaf91a4387f6946bd7aa3bd07d84ba85a132abe08a3d747916cd928bdf3575cb00926885", 0x22}, 0x60) 01:50:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) [ 324.054633][ T8702] loop3: detected capacity change from 0 to 264192 01:50:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) [ 324.096081][ T8706] loop1: detected capacity change from 0 to 264192 [ 324.113906][ T8702] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) [ 324.188158][ T3803] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 324.188612][ T8706] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 324.373509][ T3675] Bluetooth: hci0: command 0x0401 tx timeout 01:50:32 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:32 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000180)={r0}) 01:50:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:32 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2404c041) 01:50:32 executing program 2: syz_open_dev$media(&(0x7f0000000040), 0xffffffffffffffff, 0xc142) 01:50:32 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff7) 01:50:32 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=@in={0x2, 0x0, @empty}, 0x10, 0x0}], 0x1, 0x0) 01:50:32 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 324.777291][ T8714] loop1: detected capacity change from 0 to 264192 [ 324.790950][ T8716] loop3: detected capacity change from 0 to 264192 01:50:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 324.850456][ T8714] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 324.862564][ T8716] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) 01:50:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf2506"], 0x24}}, 0x0) 01:50:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 325.012280][ T8734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.035207][ T8733] loop1: detected capacity change from 0 to 264192 [ 325.090968][ T8733] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 01:50:33 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 01:50:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@acquire={0x130, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2, {@in6=@empty, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0, 0x0, 0x0, 0xee01}}}, [@XFRMA_SET_MARK_MASK={0x8}]}, 0x130}}, 0x0) 01:50:33 executing program 2: select(0xffffffffffffffe9, &(0x7f0000000680), 0x0, &(0x7f0000000700), &(0x7f0000000040)) 01:50:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:33 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x4b8001) [ 325.667877][ T8739] loop1: detected capacity change from 0 to 264192 [ 325.669378][ T8743] loop3: detected capacity change from 0 to 264192 01:50:33 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x10}, 0x10}, 0x0) 01:50:33 executing program 2: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "4640c07fe85326b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac41e4b0b6b0bc7f4a48cb9a00"}, 0xffffffffffffffc6, 0x0) [ 325.719170][ T8743] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) 01:50:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x20000080) 01:50:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 325.764867][ T8739] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 01:50:33 executing program 2: set_mempolicy(0x0, &(0x7f0000000180)=0x5, 0x0) set_mempolicy(0x0, &(0x7f0000000100), 0x4fe2) [ 325.900232][ T8756] loop3: detected capacity change from 0 to 264192 [ 325.928650][ T3675] Bluetooth: hci4: command 0x0401 tx timeout [ 325.952353][ T8756] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) 01:50:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5e}, 0x14}}, 0x0) 01:50:34 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_LLSEC_KEY_MODE, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_HW_ADDR, @IEEE802154_ATTR_LLSEC_KEY_ID]}, 0x8f}}, 0x0) 01:50:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:34 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="a6", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @private0}, @sndrcv={0x30}], 0x50}], 0x1, 0x0) 01:50:34 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{}]}) [ 326.618176][ T8764] loop3: detected capacity change from 0 to 264192 [ 326.626438][ T8766] loop1: detected capacity change from 0 to 264192 01:50:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x403}, 0x14}}, 0x0) 01:50:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) [ 326.677890][ T8766] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 326.708478][ T8764] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) 01:50:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 01:50:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:34 executing program 0: r0 = msgget(0x2, 0x0) msgsnd(r0, &(0x7f0000001280)={0x1}, 0x8, 0x800) 01:50:34 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 01:50:34 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff801, 0x4) [ 326.885785][ T8782] loop3: detected capacity change from 0 to 264192 [ 326.887539][ T8781] loop1: detected capacity change from 0 to 264192 [ 326.907393][ T8782] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) [ 326.942100][ T8781] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 327.018705][ T8788] tipc: Trying to set illegal importance in message 01:50:35 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, @remote, @mcast1}}) 01:50:35 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 01:50:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:35 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) 01:50:35 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "9c51ba57257107cf27ed5d071583436d47631e8d1d6cbb139f1951728e4d418bdea2da6356ed6f12cdacb3eb8ce92a77bcfc11dd5289ba73e9c8021300676915"}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) 01:50:35 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 01:50:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000000000002450000140000000000009078e0"]}) [ 327.563781][ T8797] loop3: detected capacity change from 0 to 264192 [ 327.566113][ T8798] loop1: detected capacity change from 0 to 264192 [ 327.618633][ T8797] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) [ 327.643867][ T8798] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 01:50:35 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "4640c07fe85326e2b914cb568c23c42c1417f2b8e421b671ed2ed197dd4a987d9e2f7ad186d0441e796e73b10dd426a926260ebeac3ee4b0b6b0bc7f4a48cb9a"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 01:50:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x6f, 0x0, &(0x7f0000000140)) 01:50:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 327.825409][ T8813] loop3: detected capacity change from 0 to 264192 [ 327.859419][ T8813] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) 01:50:36 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:36 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r2, 0x0, 0x0}) 01:50:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}, {&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000015c0)}], 0x2, 0x0) 01:50:36 executing program 0: getitimer(0x6, &(0x7f0000000080)) 01:50:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) 01:50:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @dev, 0x1}}}, &(0x7f00000000c0)=0x90) 01:50:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) [ 328.460013][ T8819] loop1: detected capacity change from 0 to 264192 [ 328.484848][ T8822] loop3: detected capacity change from 0 to 264192 01:50:36 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="a6", 0x1}], 0x1, 0x0, 0xffffffffffffffd4, 0x81}], 0x1, 0x20001041) 01:50:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) [ 328.606225][ T8819] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 328.610901][ T8822] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) [ 328.634802][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 01:50:36 executing program 0: socket$l2tp(0x2, 0x2, 0x73) select(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000700)={0x9}, &(0x7f0000000780)) 01:50:36 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:36 executing program 4: socket$l2tp(0x2, 0x2, 0x73) select(0x40, &(0x7f0000000680)={0x6}, 0x0, &(0x7f0000000700)={0x9}, &(0x7f0000000780)) 01:50:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:36 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)) 01:50:36 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) 01:50:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="a6", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @private0}, @sndrcv={0x30}], 0x50}], 0x1, 0x0) 01:50:36 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 329.373326][ T8848] loop1: detected capacity change from 0 to 264192 [ 329.374933][ T8847] loop3: detected capacity change from 0 to 264192 [ 329.411973][ T8848] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 01:50:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "f5ae33052ca0af10f09eefd7849e56f7603d75ef66a7f4787ae060bc60e68daf"}]}, 0x44}}, 0x0) [ 329.452857][ T8847] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) 01:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:37 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$802154_dgram(r0, &(0x7f00000000c0)={0x24, @short}, 0x14) [ 329.627183][ T8861] loop3: detected capacity change from 0 to 264192 [ 329.635860][ T8859] loop1: detected capacity change from 0 to 264192 [ 329.659081][ T8859] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 329.661405][ T8861] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 329.720363][ T3803] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 329.743569][ T4096] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:37 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2, {@in6=@empty, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, [@tmpl={0x44, 0x5, [{{@in6=@dev}, 0x0, @in=@remote, 0x0, 0x6}]}]}, 0x16c}}, 0x0) 01:50:37 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x6, 0x9) 01:50:37 executing program 0: socket$l2tp(0x2, 0x2, 0x73) clock_gettime(0x0, &(0x7f0000000740)={0x0}) select(0x40, &(0x7f0000000680)={0x6}, 0x0, &(0x7f0000000700)={0x9}, &(0x7f0000000780)={r0}) 01:50:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:50:37 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) io_setup(0x7fff, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 01:50:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c010000170001"], 0x16c}}, 0x0) [ 330.278660][ T8871] loop3: detected capacity change from 0 to 264192 [ 330.293979][ T8873] loop1: detected capacity change from 0 to 264192 01:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 330.352478][ T8873] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 330.365832][ T8871] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 330.386684][ T8880] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 01:50:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:38 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="11", 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000600)='\'', 0x1}], 0x1}}], 0x2, 0x8c41) 01:50:38 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) io_setup(0x7fff, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 330.501324][ T8885] loop3: detected capacity change from 0 to 264192 [ 330.521148][ T8886] loop1: detected capacity change from 0 to 264192 [ 330.531235][ T8885] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 330.566124][ T8887] syz-executor.4 (8887) used greatest stack depth: 19472 bytes left [ 330.598306][ T8886] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 330.649036][ T4096] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:38 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 01:50:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) 01:50:38 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) io_setup(0x7fff, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 01:50:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:38 executing program 0: r0 = socket(0x28, 0x2, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 01:50:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 01:50:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 331.152101][ T8895] loop1: detected capacity change from 0 to 264192 [ 331.175202][ T8899] loop3: detected capacity change from 0 to 264192 01:50:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) [ 331.231534][ T8895] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:38 executing program 4: set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) [ 331.410799][ T8915] loop1: detected capacity change from 0 to 264192 [ 331.420567][ T8909] loop3: detected capacity change from 0 to 264192 [ 331.466095][ T8915] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 331.528586][ T4096] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:50:39 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:39 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000680)={r1}) 01:50:39 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) 01:50:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) 01:50:39 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) io_setup(0x7fff, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 01:50:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}, {@jqfmt_vfsv1}]}) 01:50:39 executing program 0: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x280) 01:50:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000170001"], 0x16c}}, 0x0) [ 332.075225][ T8922] loop1: detected capacity change from 0 to 264192 [ 332.082786][ T8920] loop3: detected capacity change from 0 to 264192 [ 332.133547][ T8922] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:50:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) 01:50:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) [ 332.265077][ T8933] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 01:50:39 executing program 4: socket$tipc(0x1e, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) select(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000700)={0x9}, &(0x7f0000000780)={0x0, r0/1000+10000}) 01:50:39 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x3, &(0x7f0000001740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x80000001}, 0x0]) [ 332.357837][ T8935] loop1: detected capacity change from 0 to 264192 01:50:40 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:40 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x80002) write$cgroup_pid(r0, 0x0, 0x0) 01:50:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x275ee42d87413c45}, 0x6) 01:50:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) 01:50:40 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 01:50:40 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x7fff, &(0x7f0000000000)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:50:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "40a9fe"}) 01:50:40 executing program 3: syz_genetlink_get_family_id$nl80211(0xfffffffffffffffd, 0xffffffffffffffff) [ 332.986463][ T8945] loop1: detected capacity change from 0 to 264192 01:50:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) 01:50:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000a80)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="11", 0x1}], 0x1, &(0x7f0000000300)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0) 01:50:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @private}}}}) 01:50:40 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000180)={0x0, 0x9, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 333.186067][ T8959] loop1: detected capacity change from 0 to 264192 01:50:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:41 executing program 3: r0 = socket(0x10, 0x2, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 01:50:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}]}) 01:50:41 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x18, r0, 0x96a6aef96d5571f9, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 01:50:41 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 01:50:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8a5) 01:50:41 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={0x0}}, 0x0) 01:50:41 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 01:50:41 executing program 0: r0 = msgget(0x2, 0x0) msgsnd(r0, &(0x7f0000001280)={0x1, "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"}, 0xfd1, 0x800) [ 333.918424][ T8971] loop1: detected capacity change from 0 to 264192 01:50:41 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "934d2344158e83e31e6f13b55da61d508d4936d4c77edf798d7eefb3a8c456ce701c3114389ca7f19ff327883313a9b30c782d997e85a34f79f0ed902ee419"}, 0x60) 01:50:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}]}) [ 333.986784][ T8971] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal 01:50:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:41 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x0, "df752e5758c13a0682f418e63a7c93497e8aa05d264f22529950d0e10df3669de50da316270f8541bb0e826580927898c462c6db9710b87049cbfce793467dda"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r0) 01:50:41 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13cfd976"}, 0x0, 0x4, {0x0}}) 01:50:41 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000080)=""/164, 0xa4) 01:50:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000000)=@flushpolicy={0xec4, 0x1d, 0x0, 0x0, 0x0, "", [@lastused={0xc}, @algo_auth_trunc={0xcd, 0x14, {{'blake2s-224-generic\x00'}, 0x408, 0x0, "5f770f86c6c6d20cf52252ae462fcd6d9fc53dbd21c1cdca1d640b65e42e764e36d7ad93632a35bc4f3c582219b650becd172155ed2e96ca89f5e71e8f5246c5c6447156085b604737b5fd5a7772daf180d3e911f9ba9332cd8e5917e81a51c68de365fc34205fcae22d626e9f000478166fbcaf2fa7b46e51a9895c3b4978b499"}}, @algo_comp={0xdd5, 0x3, {{'lzs\x00'}, 0x6c68, "6d89a16113a6a08533c7012bb57a7bf831a3af8f1ebba5c020a4a8c82f55066a3167bcce1ac3f3ef4d09097d417a73b4e3afb6988cac5000d2d0e98cce279ab57574c935c8317783b8edf1cfae98a8ad4d97e6959a4a2a0a092c90cb43366c9b37f49bf57cd960fe0e9bcacb15ab75b056150787754da0e951be15e15b7cc760da031635f33df72731231674513c9374a626e64f627a671cc17931794dcc9afddb41214e43e49b0a27f74ab06f736cbe8354a8587ce081fc0bbc9148181240ed2d97f7409e1d5dcb6f10e606de22c5ba180c90da3756eb4583ea892df2d70c697c8ae313e7a9be51480a82a6776baa5194e2778bf2a59c9076646f930853332504a32ad66beac4700b73b88fc0db85197cf8c643615df85bf3665582cee2d84e139083d6e5f5f2d8c2574b83615eb3a2fdf1ab697de21b5ae136b92ff1125d68951b32e86699de9dc2eaad60988470aadc674e536d3842e3b76f3ef2be4c8d870a9e93b172d1ebdfcdacc1023fc43513e9cb3bc6685249659e24ee19a99bce0b1b16a03af27ca58502d711d2f1bacf2ae46d05bf79d99ce1b57dd15c8e1d7417fce9148394460190c1ef90907fa5f4e23669db86eb3c784862d71db8a30d1125becc61405ab1ae0b59c7ce22fcb1179dc7da4dd231289ebd437f96accdb12ebadd6bbbd70905c48b0ac0a8aaefbfa229cd87efc8425ef7f529f69ee5d1ad27f98eec05904142646aa797b95dc29f1dbc1aecc2ba29b1af8ab57cc9c0eb2022bcce7a533db53b4f782fdd774e3d6214a5dd6ca76cf137bc7fbc28537fa3c12896d05f604a69815a32c99de5e9d6a580ae121e776e32df4d788c5f12323bc237dd337ec961fa0ebe75aab99bf46d3944be2bba2db26c18910b837574f058462e677aa59a55895c42976ea8a130941c4fb1bad2ae2de6427d7856ec64e0fa8b6f459fada3cdf1f15d54cfa74c7ff537cac2aee27faecebe500bbc52bad4c6eb402cd7d25f585f4b3b87e42da3336318be673ac553d68efa9a00ca6fa82a9ec411f2a1dd0f400f2950d0e159f4e8e86025d5e1c3bb1d51712185053c39f5778abd7d6beed632acde681eec73a60d583d6bab4e36448271c33e6f2638e0d26f028c4b53112c60d7877d1f9b9b83a8e2b1db3bc95f548b94a181d263b80a692649cb9130c0808e15af88058a3ececbeb4e13bc7847eb53f00611d0963931ee3c0acb85523df5e258f64f58ec44eed20ec0dbb3d6f9c12bbff269b2dbff3b6ad74588574faf9112a85ff15462cef8d64e0ce92b58250e1738a5b623cd28d79343f185e4ccedba15c7c5e03f62034cfc656a354caded01100633d414c40e9a0bcb82bfd5604193f280b99d1db77d54fa98fcff29f81398c7aba9b0daabd2464cce3124da7edb00455333809cd7dc4199e46eeff65fa69c891aab0b064db2b682055d7722bff5474f635201e37595ccb99a6c6cf3e74674c16f2426cbf5092b491b6a622a77af779f3320cf9836f45add83879f5325a1e35e897644c19f31475059116cb9a784365e90582c8b930b63f929c87399192088c3ec0da5b1fb28239f781247a1a97ed82d965470b9684f96f38d5ac7e57214f81f94088104d5b505daf3307caa2d293776660e6a998f524d78cceceb65c3f61c824964dead7cb64e9c9777a2b98bb970789892d780c1b311ae39c39f9803435becf5143d6c9e743687bf9c4868cb764ffb1ec5a87fcd5f0207440f41eb8f8ef4000a11c521932b6ead41c76379cf92692223ed401e824d03db681de2deac2d08e688d0acd6893cbd3b2554b38ea302738d7a7800daad9a32abbacf2025043fa4160eb45dbd35306993a5db9844c6469fd40caaab0af8983c8f62d9d29df0ca860599cd209a07df1ff9a19579403135e2f387d946251b93192fb07fe74d7c62a287cfb2de31c7cd01da83e645de87ef5335a1552b9125a1367cdce4bd95d7ee0049f0d4c397f1492105f61aa51bf69f75d0a612281c9f585ee88bcf6b450a82b4cb17e8e0cd519abc73c2987d1b2544853132d26969ec4b8239eaaa341b01770c617eaa626db9f2a14db90449f1d5f926b4e3446d29b18d4745489b4f1e628ca20eed8877837e09cada4dcd67909a21a09c5ffb6627ef8c01bcb92af2bc9fdeaaa1c8da110e465ae046ccee02aecb6642cfab68100edad53822a65aa1617ca5137ac04f8cc5e948a5fd2e79a58067983124cfacd1153b8a2a028fa40590575e0e4a7dbd8457dd3fe50ac086b45078f010d9391a6af87649790467918bd8e7cebefd9e92df94d8d1151f8d28a2a743c4b206dad09553c694869c46f0d92c25fbb0c259c820219a51eb52e73f0e34454e8d336ac06dfa8c4c26a58c956ecbbcdafdfe46ead3c74de7a8b8f9f78912ca40e04523447374d9b594e53c3531963bae07723fd784649210ebfa4c324bdd99d9a4a2b6ef63cbbd4fe52fa880e9bb06ce18bbbc644942dfb6673b75c5467d489903081c582107d6cc8297c638322b87b6a3ea013ea9e3de3e2899345be37e75105642339f5ad2c25809190a6c8605f2265337e4e9d5ae83115df7beeec36cd8cba0313f69ce5a25ec4fea0d7064340f5c993c3694cd6440a9376bc9f31ed523c0813238bedb07a4e01a4d28a265607d81d698aae5f0f33433849e581b1f2fdb5b5b38759f6d8c2f0a7dd0efad4ea7e6e7dac0ba388ecb8430272c77df359f73c4d0bd6d05d218bad7e04e2cb9dcffffcb5427018a5a74daab46c83b06d69f009fce85d78d10ee5a67175938e14405746cc8aff702753b41da9018cb8114b9868ee3a8c76b68a906c88dc7df09c723cc9923957779865514df55db494d9be05a7b9ebecde480e99b3e9ef30be00a5000fd651bf0fd2673a29240442f4453586f0de8d5bd6aa7962e607713436876e5f58271d5ed960d13c563a6c21d535d5cfe19da367c5113863ccb56a5930e0c25f97ada8ebab6ec4d63efc69db77501ff55b0f8f8379dbcbdf14266f096bcb0beb3cd61490c4acd22628426e63b2a5130c7c0518201baf4cac96d562af8f97c9cd4eed51c88026457d5d408ac49942eb540170caa6d8b4dc955af32b7d07d6f8dfe810f4e7af25cb0579fe2a0d5e00a55ef10a48d416c83d1bd53afad59c7dfbe6dbf9d6c18b622e8c07086a482da8888ca2772a3808d563cd0c876d609a5ae3ab536513d70e78d03fbf11b7407ee3e0d7259cd8d55e57412a23b85e271b71958bb5879e4a9a0acced044f698ea94f3d590e042895f6472ff2836777c7a61da8f06767f27ad41cf3aa6195bc3458f460fbe9a2527c45161cb62ab934e42070f642a16d4979ac594f33da307cb6ad98c55bffc83f7e6dbbec31ae6868cd5eaa088b6f99afa37e1809bfb19db9b4c7a3b26ce0a1095e9661d8f7b6b9e3052c22f43571af8366bd66877db27651419bc65546875201486575d894324bf161caec83d12d953433f3bf08d738d1bfcabef52934e80b3470d56fa009071ed0a433a4088d6c6a84f73315fb80442f207c979f7ba19c9f8130c864351f33d407552d0816e70a4e82ddb0e58da6cf8f4eeb63e4521fe85f4be4243ff47dadb40472ee4ed3ed8c681ce18b0594fbde803c0e8485619f789dd5172b98f0636e79e2e792f9a684259903a8bd5a0b3d9b94e43fe8f1a611ee91e469315ebd60333e13bcd0db213a9e12f9da14aa676aab886dc9bdee76adfc8d5a17c1baf2f31dc9612ac75298c53251874f40c4f60555a2ab5d029420f959fce5764df77aefc732c1f04c35f30a840e0fd2bf779e2f3212ebc84b01e2e5d315175877f5da54332cdf82226e25fcf4203dacb72a4c17809c1768b1eae1eed0ad28be0fcf8e2d0d97db1b95bad0660b0cabf92da795c85b7582934946a07482848aa0967fc29255b6deb014516cca9eee6801570dd1825fbea8a0a8086c1867c4f55b828d8ad899fb0c46b26cc44a30ed36eb09ff357e7bc7c15273839dc4e7d54c23a9c8117a26c965d88c706c4d895f6f60894a24f77bc8c200802b7648fb5fc10c7e111717b509058e8acc9cf976f278f2e2019e6c71ea8e8290c1a256c766f8582165c49b12f9af894b436a3c259ad7f4228e97f73277481a79f4bba6c96ae78d8660c7896cdd7a517abb8488515c77b9934191dc8583772af4ad31dcace68a44f8cc2dc8d866f70c39314484531c9ec3a1c729a484afd38d1ae7ba15c5239eab68936bea7fe9697602ba764178804096d6097f4fbac74ca2bf4817b117145b326af6af4c823e8aaeb63d8c122415eb48172ded8508a6f86a7679a7e41c9026cd772f9203de4110738d2bd989bdac08e90a9b64b3aa49b5cb3beb91ac45656e0c5aaa084c8d4c6bf4f67c010a3f7ccc7f49a54865a95745fd77f821f8ed0a8027c4ce5958db732def18a70280977e2d81f1fbc7d696f3e46972ecec8558c2e69d22d67f4c20865d6cc174af2ebed458735dc651a32b5f08241ebce2e2ca0aa1f39d12f20671155eeb141088d13fcd03a4d791ae631e511d534320cd732a45b5a91840a1c51a993057f625d7cfffa6c09eff5026d9514630b4eabfef4111ad34607ea4ca377df5ca9aefa3acfc674c62ef705ea8b19d1b466c0a23a3c03e6e069e9e40f946828cc788d8a242abcf16e70aba0925d15f6e06d5b0a9236f373b6e634de17210a1d8392ac89c669c045a4cedf7c33712aff5b9d25e7f1aba36d65a08a898b8725b85554b761c41aca8e16e8bb3e07253c20fefb54b96f0938eba1d52ef1c479e1c78076a5ed4b2b0d7451be725a640b9077413c5e774cf7a559cc9b00f7cd451d1a34aa6c637271d628fade09c6854fb03e1d8d0e06f4986f40b07f23b6f40887c813784a47afa7c32297b3b3db21a6dcf3325ef169a69742100d981b5feb9636c13ef982"}}]}, 0xec4}}, 0x0) 01:50:41 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 01:50:41 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0xa92, 0x7d) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) [ 334.170871][ T8991] loop1: detected capacity change from 0 to 264192 01:50:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2, {@in6=@empty, @in6=@empty}, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, [@tmpl={0x44, 0x5, [{{@in6=@dev}, 0xa, @in=@remote, 0x0, 0x6}]}]}, 0x16c}}, 0x0) 01:50:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) 01:50:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8f, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @private}}}}) [ 334.260460][ T8991] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal 01:50:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@data_ordered}]}) 01:50:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@private=0xa010100, 0x0, 0xa}}]}, 0xe4}}, 0x0) 01:50:41 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000003d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 01:50:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000002d80)=@flushpolicy={0x10}, 0x10}}, 0x0) 01:50:41 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x3e2}, 0x0) 01:50:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 01:50:42 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 01:50:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@private=0xa010100, 0x0, 0xa}}]}, 0xe4}}, 0x0) 01:50:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)) 01:50:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 334.507657][ T9021] loop1: detected capacity change from 0 to 264192 [ 334.527233][ T9021] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal 01:50:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@private=0xa010100, 0x0, 0xa}}]}, 0xe4}}, 0x0) 01:50:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@jqfmt_vfsv1}]}) 01:50:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000002100)=ANY=[@ANYBLOB="73797a746e6c3200000049df4b0ea637a4d4a26ca9"]}) 01:50:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000c16799"], 0x10}}, 0x0) 01:50:42 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x0) select(0x40, &(0x7f0000000680), 0x0, &(0x7f0000000240)={0x9}, &(0x7f0000000780)) 01:50:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:42 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x3, &(0x7f0000001740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x80000001}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:50:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 01:50:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xe4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@private=0xa010100, 0x0, 0xa}}]}, 0xe4}}, 0x0) 01:50:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000023df54f797"], 0x44}}, 0x0) 01:50:42 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d4", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) [ 334.740499][ T9038] loop1: detected capacity change from 0 to 264192 01:50:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000001100)=ANY=[], 0x10c0}}, 0x0) [ 334.822606][ T9038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled 01:50:42 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={0x0}}, 0x0) [ 334.867896][ T9052] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 334.902767][ T9038] EXT4-fs error (device loop1): __ext4_fill_super:5326: inode #2: comm syz-executor.1: iget: root inode unallocated [ 334.943821][ T9038] EXT4-fs (loop1): get root inode failed [ 334.949649][ T9038] EXT4-fs (loop1): mount failed 01:50:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@jqfmt_vfsv1}]}) 01:50:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:42 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000080)={0x400}, 0x0, &(0x7f0000000100)={0x3e2}, 0x0) 01:50:42 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 01:50:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @local}}) 01:50:42 executing program 2: r0 = socket(0x1e, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 01:50:42 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 01:50:42 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) 01:50:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f000000bf00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) 01:50:42 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x500a0400, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x85) r4 = syz_clone(0x68003200, &(0x7f0000000280), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001280)="1476023ba698c3133aa559664314dd64fe30810d20070016e2b189fd360fadc3f6b3d9bd261ab3f9ac05d03962e2b1fef22885c7cf5dc86f1b151f090e8487bc3ee9584469ae0e70e8694b4e9a09dc65e22144dca8822a706ad3496b51da8eea648f8bea004edc2f3e2c97b26490aad818ee195036f5394b0b43d4a4204ce28270d9edf8e0f258644a3897030db4e35a52f4a1257407495ad00f299ba874a2e490c010c7d9f4ab03a3b8825accfb4be14807de925ddf771056fe87bd557b73") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 01:50:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 335.098273][ T9070] loop1: detected capacity change from 0 to 264192 01:50:42 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x500a0400, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x85) r4 = syz_clone(0x68003200, &(0x7f0000000280), 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001280)="1476023ba698c3133aa559664314dd64fe30810d20070016e2b189fd360fadc3f6b3d9bd261ab3f9ac05d03962e2b1fef22885c7cf5dc86f1b151f090e8487bc3ee9584469ae0e70e8694b4e9a09dc65e22144dca8822a706ad3496b51da8eea648f8bea004edc2f3e2c97b26490aad818ee195036f5394b0b43d4a4204ce28270d9edf8e0f258644a3897030db4e35a52f4a1257407495ad00f299ba874a2e490c010c7d9f4ab03a3b8825accfb4be14807de925ddf771056fe87bd55") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) [ 335.173968][ T9070] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.183995][ T3747] Bluetooth: hci0: command 0x0401 tx timeout [ 335.247672][ T9070] EXT4-fs error (device loop1): __ext4_fill_super:5326: inode #2: comm syz-executor.1: iget: root inode unallocated [ 335.285048][ T9070] EXT4-fs (loop1): get root inode failed [ 335.290863][ T9070] EXT4-fs (loop1): mount failed 01:50:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bdbe7d6b1f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000400)={[{@jqfmt_vfsv1}]}) 01:50:42 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x206380, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3e2}, 0x0) 01:50:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b9a509393b6ccf7ff5ad9457d93e2861fe6379cf2c846e4a86a3f5f2981d65243c34a5aa3f4cb2855ee20cc97e6f2e0556e9f8b6c10a527ae594c6798369bb"}, 0x60, &(0x7f00000012c0), 0x10d3, &(0x7f0000000080)={0x68, 0x0, 0x0, "e35433e1b856ad7c13499f4e22bbc6daf49ed33c06f4eb62526f3381ff4e76b16bd75634a6ea1b023e8d15c6c1dcffeb7edc83aac29fcfb966022bafefa05ac8e112716972e662ce1d397f265519bebb1546dc4a5f"}, 0x68, 0x200608c0}, 0x20040010) 01:50:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:50:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) 01:50:43 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001a80)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2}) 01:50:43 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000740)) [ 335.510969][ T9095] loop1: detected capacity change from 0 to 264192 [ 335.549372][ T9095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.594328][ T9095] EXT4-fs error (device loop1): __ext4_fill_super:5326: inode #2: comm syz-executor.1: iget: root inode unallocated [ 335.635749][ T9095] EXT4-fs (loop1): get root inode failed [ 335.653336][ T9095] EXT4-fs (loop1): mount failed 01:50:43 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000200)={0x2a, 0x1}) 01:50:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2843, 0x8, 0x9}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)) r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24048000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000005c0)) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000600), 0x14bc40, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000640)={"71ac3d5107282cedd54099d293203905aa7f5e903fb64506f78c8bb0de88", 0x7, 0x4, 0xfffffffe, [0x3, 0x4, 0x40, 0x0, 0x100, 0x6, 0x9, 0x8, 0x2, 0x500, 0x6, 0x6, 0x200, 0x2, 0x9, 0x0, 0x4, 0x7ff]}) r2 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000006c0), 0x8ff80fc0367aad64, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004140}, 0x801) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) 01:50:43 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:43 executing program 4: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x0) 01:50:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 01:50:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2843, 0x8, 0x9}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)) r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24048000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000005c0)) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000600), 0x14bc40, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000640)={"71ac3d5107282cedd54099d293203905aa7f5e903fb64506f78c8bb0de88", 0x7, 0x4, 0xfffffffe, [0x3, 0x4, 0x40, 0x0, 0x100, 0x6, 0x9, 0x8, 0x2, 0x500, 0x6, 0x6, 0x200, 0x2, 0x9, 0x0, 0x4, 0x7ff]}) r2 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000006c0), 0x8ff80fc0367aad64, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004140}, 0x801) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) 01:50:43 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000200)={0x2a, 0x1}) 01:50:43 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r0 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f00000003c0)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x20, 0x1, 0x3, 0x0, "a18d4f34"}, 0x0, 0x2, {&(0x7f0000000300)=[{0x40, 0x80000000, {&(0x7f0000000280)}, 0x1}, {0x101, 0x401, {&(0x7f00000002c0)}, 0x956}]}, 0x8d3, 0x0, r0}) io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x4493, 0x8, 0x0, 0x0, 0x0, r0}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, 0x0) 01:50:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 01:50:43 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:43 executing program 3: bpf$MAP_CREATE(0x8, &(0x7f0000000780), 0x48) 01:50:43 executing program 0: openat$proc_capi20ncci(0xffffff9c, &(0x7f000000a500), 0x111801, 0x0) 01:50:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x0, 0x0, 0x0, 0x596, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 01:50:43 executing program 4: io_uring_setup(0x85268, &(0x7f0000000440)={0x0, 0x0, 0x10}) 01:50:43 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f00000003c0)=@multiplanar_userptr={0x6, 0x0, 0x4, 0x2000, 0x0, {}, {0x3, 0xc, 0x20, 0x1, 0x3, 0x4, "a18d4f34"}, 0x1, 0x2, {&(0x7f0000000300)=[{0x40, 0x80000000, {&(0x7f0000000280)}, 0x1}, {0x101, 0x401, {&(0x7f00000002c0)}}]}, 0x8d3, 0x0, r0}) io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x4493, 0x8, 0x3}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000780)={0x1, 0x7, 0x2, {0x0, @pix={0x4, 0x7, 0x31324d4e, 0x7, 0x5, 0x8, 0xa, 0xb8, 0x0, 0x0, 0x1, 0x2}}}) openat$pfkey(0xffffff9c, &(0x7f0000000880), 0x10400, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000940)={0x0, 0xb, 0x4, 0x4, 0xfffffffb, {}, {0x2, 0x2, 0x7f, 0x2, 0x3, 0x89, '4>@L'}, 0xff, 0x4, {}, 0xf9a}) 01:50:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 01:50:44 executing program 3: openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) openat$proc_capi20ncci(0xffffff9c, 0x0, 0x0, 0x0) 01:50:44 executing program 4: socket$unix(0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:50:44 executing program 3: bpf$MAP_CREATE(0x1c, &(0x7f0000000780), 0x48) 01:50:44 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:50:44 executing program 0: pipe2(0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 01:50:44 executing program 4: syz_clone(0x52050800, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:50:44 executing program 3: syz_io_uring_setup(0x61a1, &(0x7f0000000640)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 01:50:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1a}, 0x48) 01:50:44 executing program 1: socket$unix(0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x10001) 01:50:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000740), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000880)={0x0, @pix_mp}) 01:50:44 executing program 3: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x4493, 0x8}) 01:50:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x0, 0x0, 0x0, 0xc}, 0x48) 01:50:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x2041, 0x0) 01:50:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0x0, 0x0, 0xc}, 0x48) 01:50:45 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:45 executing program 3: syz_emit_ethernet(0x3f, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x9, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, ']'}}}}}}, 0x0) 01:50:45 executing program 1: mq_open(&(0x7f0000000040)='\x9f\':@\x00', 0x40, 0x0, &(0x7f0000000080)) 01:50:45 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000200)) 01:50:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty}, @phonet, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) 01:50:45 executing program 4: openat$sequencer(0xffffff9c, 0x0, 0x0, 0x0) 01:50:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x0, 0x0, 0x0, 0xd}, &(0x7f0000000240)=0x20) 01:50:45 executing program 3: syz_emit_ethernet(0x3f, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x9, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, ']'}}}}}}, 0x0) 01:50:45 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000400)) 01:50:45 executing program 0: bpf$MAP_CREATE(0x1d, &(0x7f0000000780), 0x48) 01:50:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) 01:50:45 executing program 4: r0 = semget(0x1, 0x0, 0x204) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x2, 0x2d5) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000000)=""/178) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f00000000c0)=0x3) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000100)=""/77) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000180)=""/227) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000280)=""/239) 01:50:46 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:46 executing program 1: pselect6(0x40, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)={0x9}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x3ff]}, 0x8}) 01:50:46 executing program 0: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_setup(0x5745, &(0x7f0000000440)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 01:50:46 executing program 3: syz_emit_ethernet(0x3f, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x9, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, ']'}}}}}}, 0x0) 01:50:46 executing program 2: stat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) pipe2(&(0x7f0000000140), 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) 01:50:46 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$GETPID(r0, 0x2, 0xb, 0x0) 01:50:46 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 01:50:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000100)={r0, r1+10000000}, 0x0) openat$proc_capi20ncci(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 01:50:46 executing program 4: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000200)=""/4096) 01:50:46 executing program 2: r0 = openat$random(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 01:50:46 executing program 3: syz_emit_ethernet(0x3f, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x9, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, ']'}}}}}}, 0x0) 01:50:46 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a18d4f34"}, 0x0, 0x2, {0x0}}) 01:50:47 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:47 executing program 4: syz_io_uring_setup(0x3964, &(0x7f0000000240), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 01:50:47 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 01:50:47 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000600), 0x14bc40, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000006c0), 0x8ff80fc0367aad64, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c884}, 0x80) 01:50:47 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, &(0x7f0000000080)={0x5}, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 01:50:47 executing program 0: r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000040)={0x0, 0x0, "9a61c0e9bb4955617c3d01b51f566fc86a5c2d293f237684"}) 01:50:47 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0xfffffffffffffffc}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xc8b]}, 0x8}) 01:50:47 executing program 1: r0 = openat$capi20(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000340)) 01:50:47 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 01:50:47 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0), 0x8}) 01:50:47 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) 01:50:47 executing program 0: mq_open(&(0x7f0000000040)='\x9f\':@\x00', 0x0, 0x0, &(0x7f0000000080)) 01:50:48 executing program 1: r0 = semget(0x3, 0x0, 0x2d5) semctl$SETALL(r0, 0x0, 0x11, 0x0) 01:50:48 executing program 4: socket(0x18, 0x0, 0x5) 01:50:48 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 01:50:48 executing program 0: openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) 01:50:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 01:50:48 executing program 5: syz_clone(0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)="16") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) 01:50:48 executing program 4: openat$pfkey(0xffffff9c, &(0x7f00000000c0), 0x3581acd04e2b1e61, 0x0) 01:50:48 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request}}}}}, 0x0) 01:50:48 executing program 1: epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x8) 01:50:48 executing program 0: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002000)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)) 01:50:48 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000016c0), &(0x7f0000001700)=0x4) 01:50:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) 01:50:48 executing program 0: bpf$MAP_CREATE(0x21, &(0x7f0000000780), 0x48) 01:50:48 executing program 1: openat$pfkey(0xffffff9c, &(0x7f00000000c0), 0x101200, 0x0) 01:50:48 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002300)) 01:50:48 executing program 4: r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) 01:50:48 executing program 5: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x3) 01:50:48 executing program 0: open$dir(&(0x7f00000001c0)='./file1\x00', 0x2b0a01, 0x0) 01:50:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000040), 0x80000000000008e, 0x2041, &(0x7f0000000080)={0x0, 0x3938700}) 01:50:48 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000400)) timer_gettime(0x0, &(0x7f0000000540)) 01:50:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x0) 01:50:48 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0x8}, 0x10) 01:50:48 executing program 3: mq_open(&(0x7f00000014c0)=']&\x00', 0x0, 0x0, 0x0) 01:50:48 executing program 0: io_uring_setup(0x5264, &(0x7f0000000440)={0x0, 0x761, 0x8}) 01:50:48 executing program 4: setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 01:50:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x18}, 0x48) 01:50:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 01:50:48 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f0000001840), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 01:50:48 executing program 4: syz_clone(0x820a3800, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:48 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000540)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66d09080"}, 0x0, 0x1, {0x0}}) 01:50:48 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x1e}, &(0x7f0000000040)) 01:50:48 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x4493}) 01:50:49 executing program 4: syz_open_dev$dri(&(0x7f0000000300), 0x2, 0x4040) 01:50:49 executing program 3: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 01:50:49 executing program 2: memfd_create(&(0x7f0000000280)='\x00', 0x0) 01:50:49 executing program 0: semget(0x1, 0x0, 0x204) 01:50:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x13, 0x0, 0x0, 0x0, 0xc}, 0x48) 01:50:49 executing program 1: openat$random(0xffffff9c, &(0x7f0000000300), 0x309981, 0x0) 01:50:49 executing program 3: r0 = semget(0x3, 0x2, 0x2d5) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)) semctl$IPC_RMID(r0, 0x0, 0x0) 01:50:49 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f0000000780), 0x48) 01:50:49 executing program 0: pipe2(&(0x7f0000000380), 0x80000) 01:50:49 executing program 2: openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) 01:50:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000a06010100000000000000000000000009"], 0x20}}, 0x0) 01:50:49 executing program 1: openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000001440), 0x20040, 0x0) 01:50:49 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x3ff]}, 0x8}) 01:50:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x11}, 0x48) 01:50:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x48) 01:50:49 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x32, 0x0, @private0, @mcast1, [], "1be571d3031a2769"}}}}}}}, 0x0) 01:50:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x6, 0x301}, 0x14}}, 0x0) 01:50:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 01:50:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}}, 0x68}}, 0x0) 01:50:49 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 01:50:49 executing program 0: syz_clone(0x34000, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:49 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 01:50:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast1}, &(0x7f0000000240)=0x20) 01:50:49 executing program 1: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0xffffffffffffffff) 01:50:49 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000000780), 0x48) 01:50:49 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) 01:50:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) 01:50:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x10}, 0x48) 01:50:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 01:50:49 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 01:50:49 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/77) 01:50:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000740), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "a1859edc6ea70c098c52fd230230fc4f5193c1a3300abd9ba7573c42bb27ec14"}) 01:50:49 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 01:50:49 executing program 0: stat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) 01:50:49 executing program 1: io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x4493, 0x8, 0x0, 0x1ad}) 01:50:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000740), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, 0x0) 01:50:49 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x9}}, './file0\x00'}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$ufs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x7ff}], 0x0, &(0x7f0000000300)={[{'-'}, {'p^)'}, {'-{-{'}], [{@fowner_gt={'fowner>', 0xee00}}, {@obj_type={'obj_type', 0x3d, '-/^/[-(,[@}($-\\)*\'8'}}, {@fowner_lt={'fowner<', 0xee00}}, {@fowner_gt={'fowner>', 0xee00}}]}) syz_open_dev$loop(&(0x7f0000000840), 0x1000, 0x400800) 01:50:49 executing program 3: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8) 01:50:49 executing program 0: openat$pfkey(0xffffff9c, &(0x7f0000000880), 0x10400, 0x0) 01:50:49 executing program 1: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 01:50:49 executing program 2: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a18d4f34"}, 0x0, 0x2, {0x0}}) 01:50:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) [ 342.071070][ T9398] loop4: detected capacity change from 0 to 7 [ 342.105904][ T9398] ufs: ufs was compiled with read-only support, can't be mounted as read-write 01:50:49 executing program 2: bpf$MAP_CREATE(0x4, &(0x7f0000000780), 0x48) 01:50:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x3}, 0x48) 01:50:50 executing program 5: socket(0x0, 0x8080c, 0x0) 01:50:50 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xb, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1880030}) 01:50:50 executing program 3: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r0 = socket$unix(0x1, 0x2, 0x0) geteuid() sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000100)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x18}, 0x0) pselect6(0x0, 0x0, &(0x7f0000000500)={0x9ee5, 0x7fffffffffffffff, 0xe765}, 0x0, &(0x7f0000000580), 0x0) syz_io_uring_setup(0x61a1, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x0, 0x164}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:50:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) timer_gettime(0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000440), 0x18b000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) syz_genetlink_get_family_id$tipc(0x0, r1) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000840), 0x181800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 01:50:50 executing program 2: pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000540)={0x9}, 0x0, 0x0) 01:50:50 executing program 3: openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) 01:50:50 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f0000000780), 0x48) 01:50:50 executing program 1: openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) 01:50:50 executing program 2: r0 = semget(0x3, 0x2, 0x2d5) semctl$IPC_RMID(r0, 0x0, 0x0) 01:50:50 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="dfa5f6e61c94e898ac3fe1cdd48c4f0aef09c0c21f4c909b2768b5def64b1695c9e9112db83e1270abcf55fda9bc6fae0c28276bd9e16572") 01:50:50 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000400)) 01:50:50 executing program 1: openat$vnet(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) 01:50:50 executing program 5: syz_open_dev$ndb(&(0x7f00000022c0), 0x0, 0x8200) 01:50:50 executing program 3: write$usbip_server(0xffffffffffffffff, 0x0, 0x0) 01:50:50 executing program 2: bpf$MAP_CREATE(0x6, &(0x7f0000000780), 0x48) 01:50:50 executing program 0: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8001]}, 0x8}) 01:50:50 executing program 4: syz_io_uring_setup(0x41e3, &(0x7f0000000080)={0x0, 0x0, 0x17}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 01:50:50 executing program 5: syz_io_uring_setup(0x61a1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x164}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x41e3, &(0x7f0000000080)={0x0, 0x0, 0x17}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 01:50:50 executing program 1: r0 = openat$capi20(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, 0x0) 01:50:50 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) 01:50:50 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x5}, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 01:50:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000240)={@loopback}, 0x14) 01:50:50 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f0000000780), 0x48) 01:50:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x58, r2, 0xa01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x58}}, 0x0) 01:50:50 executing program 3: semget(0x1, 0x0, 0x0) r0 = semget(0x3, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)) 01:50:50 executing program 4: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}], 0x3, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000004c0)={[0x9]}, 0x8) io_uring_setup(0x5268, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000940)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x89, '4>@L'}, 0xff}) 01:50:50 executing program 1: r0 = semget(0x3, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x10, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)) 01:50:51 executing program 0: openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x4493, 0x8}) 01:50:51 executing program 3: syz_open_dev$dri(&(0x7f0000000300), 0x2, 0x0) 01:50:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x58, r2, 0xa01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x58}}, 0x0) 01:50:51 executing program 1: syz_io_uring_setup(0x61a1, &(0x7f0000000640), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 01:50:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x3}], {0x14}}, 0x3c}}, 0x0) 01:50:51 executing program 2: io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x0, 0x20}) 01:50:51 executing program 3: openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) io_uring_setup(0x5268, &(0x7f0000000440)={0x0, 0x4493}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) 01:50:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801}], {0x14}}, 0x88}}, 0x0) 01:50:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x58, r2, 0xa01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x58}}, 0x0) 01:50:51 executing program 4: syz_io_uring_setup(0x3512, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 01:50:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x0, 0x0, 0x0, 0xc}, 0x48) 01:50:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000740), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000880)={0x3, @pix_mp}) 01:50:51 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000400)) timer_gettime(0x0, 0x0) 01:50:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801}], {0x14}}, 0x94}}, 0x0) 01:50:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x58, r2, 0xa01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x58}}, 0x0) 01:50:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)={0x28, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x0) 01:50:51 executing program 4: r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000002100), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 01:50:51 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x0) 01:50:51 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fff, 0x2) 01:50:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0x0, 0x0, 0x41c}, 0x48) 01:50:51 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 01:50:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x1) 01:50:51 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) 01:50:51 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, &(0x7f0000000080)={0x5}, &(0x7f0000000100), 0x0) 01:50:51 executing program 2: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000180)=""/227) 01:50:51 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0), 0x8}) syz_io_uring_setup(0x61a1, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x3, 0x164}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) 01:50:51 executing program 0: openat$proc_capi20ncci(0xffffff9c, 0x0, 0x5b1a00, 0x0) 01:50:51 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 01:50:51 executing program 5: openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, 0x0) openat$proc_capi20ncci(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x14}, 0x14}}, 0x0) 01:50:51 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 01:50:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe}, 0x48) 01:50:51 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:50:51 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 01:50:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9}, 0x48) 01:50:51 executing program 3: openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) openat$random(0xffffff9c, &(0x7f0000000300), 0x309981, 0x0) 01:50:51 executing program 2: open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 01:50:51 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 01:50:51 executing program 0: stat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r2}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) 01:50:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:50:51 executing program 3: syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x10a40) epoll_create1(0x0) 01:50:51 executing program 5: write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 01:50:51 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) 01:50:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:50:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 01:50:51 executing program 0: io_uring_setup(0x76f9, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x3df}) 01:50:51 executing program 4: ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) 01:50:51 executing program 3: pipe2(0x0, 0x88080) 01:50:51 executing program 2: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$usbip_server(r0, 0x0, 0x53f) 01:50:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 01:50:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001a80)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0xfff}) 01:50:51 executing program 4: ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) 01:50:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780), 0xffffffae) 01:50:51 executing program 1: pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 01:50:52 executing program 2: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$usbip_server(r0, 0x0, 0x53f) 01:50:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x5, 0x6, 0x101}, 0x14}}, 0x0) 01:50:52 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 01:50:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x1c, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 01:50:52 executing program 4: ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) 01:50:52 executing program 1: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 01:50:52 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000740), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000880)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {}, {}, {0x0, 0x800}]}}) 01:50:52 executing program 5: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) 01:50:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8}]}) 01:50:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x200000}, 0x48) 01:50:52 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 01:50:52 executing program 5: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 01:50:52 executing program 3: bpf$MAP_CREATE(0x11, &(0x7f0000000780), 0x48) 01:50:52 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 01:50:52 executing program 0: bpf$MAP_CREATE(0x23, &(0x7f0000000780), 0x48) 01:50:52 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000001f80)) 01:50:52 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000280)) timer_getoverrun(0x0) 01:50:52 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:52 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request}}}}}, 0x0) 01:50:52 executing program 0: r0 = openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000200)={0x1f}) 01:50:52 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 01:50:52 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000100)=@framed={{}, [@map_idx_val, @ldst, @map_fd, @map_fd]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xdc, &(0x7f0000000380)=""/220, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0xca) 01:50:52 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, &(0x7f0000000080)={0x5}, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 01:50:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:52 executing program 4: syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) 01:50:52 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000100)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x18}, 0x0) 01:50:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x0, 0x826bcff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}) 01:50:52 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:52 executing program 4: syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) 01:50:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:52 executing program 0: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0xee00}}) 01:50:52 executing program 1: syz_open_dev$audion(0x0, 0x0, 0x0) 01:50:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:52 executing program 4: syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) 01:50:52 executing program 3: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$msr(r0, 0x0, 0x0) 01:50:52 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:52 executing program 0: socket(0x33, 0x0, 0x0) 01:50:52 executing program 1: openat$random(0xffffff9c, 0x0, 0x0, 0x0) 01:50:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:52 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000004c0)={[0x9]}, 0x8) openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) 01:50:52 executing program 1: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8001]}, 0x8}) 01:50:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x12}, 0x48) 01:50:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5}, 0x48) 01:50:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 01:50:53 executing program 3: r0 = semget(0x3, 0x2, 0x2d5) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)=[0x2, 0xd75]) 01:50:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001a80)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x7}) 01:50:53 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:50:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 01:50:53 executing program 4: socket$inet(0x2, 0x5, 0x5) 01:50:53 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0) 01:50:53 executing program 0: semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x3, 0x2, 0x2d5) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000000)=""/178) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000100)=""/77) r1 = semget(0x0, 0x2, 0x10) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000000180)=""/227) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000280)=""/239) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)=[0x2, 0x0, 0xd75]) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000003c0)=[0x7ff, 0x5, 0x7, 0x3, 0x1e13, 0x6]) 01:50:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 01:50:53 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x8, 0x6, 0x101}, 0x14}}, 0x0) 01:50:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:53 executing program 1: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0xfffffeb9) 01:50:53 executing program 0: io_uring_setup(0x45268, &(0x7f0000000200)) 01:50:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x4}, 0x0) 01:50:53 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:50:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7}, 0x48) 01:50:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:54 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) 01:50:54 executing program 4: openat$vim2m(0xffffff9c, &(0x7f0000001840), 0x2, 0x0) 01:50:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:50:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) 01:50:54 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x14}, 0x48) 01:50:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xa, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0881}, 0x4000000) 01:50:54 executing program 4: openat$sequencer(0xffffff9c, &(0x7f0000000600), 0x0, 0x0) 01:50:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 346.674749][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:50:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 01:50:54 executing program 3: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x2842) 01:50:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x20}]}) 01:50:54 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:50:54 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:54 executing program 0: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) 01:50:54 executing program 3: syz_open_dev$audion(&(0x7f0000000000), 0xafb, 0x10a40) 01:50:54 executing program 4: semget(0x3, 0x5610541fb3a2e40, 0x0) 01:50:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:54 executing program 1: syz_clone(0x4a44100, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x18, 0x18, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x14}], {0x14}}, 0x54}}, 0x0) 01:50:54 executing program 4: syz_clone(0x908000, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:55 executing program 3: syz_clone(0x4a44100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) 01:50:55 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:55 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 01:50:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x13}, 0x48) 01:50:55 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x1e}, 0x0) 01:50:55 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x0) 01:50:55 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 01:50:55 executing program 0: openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x40100, 0x0) 01:50:55 executing program 1: syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a3ff200180600fe800000000000db3b32cbda433d1bbbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) 01:50:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:55 executing program 3: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000640)={"71ac3d5107282cedd54099d293203905aa7f5e903fb64506f78c8bb0de88", 0x0, 0x4, 0xfffffffe, [0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x500, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x4, 0x7ff]}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004140}, 0x0) 01:50:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14}, @NFT_MSG_DELFLOWTABLE={0x18, 0x18, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x54}}, 0x0) 01:50:56 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:56 executing program 1: openat$proc_capi20ncci(0xffffff9c, &(0x7f000000a500), 0x4002, 0x0) 01:50:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x0, 0x0, 0x0, 0xc}, &(0x7f0000000080)=0x20) 01:50:56 executing program 3: bpf$MAP_CREATE(0x2, &(0x7f0000000780), 0x48) 01:50:56 executing program 4: timer_create(0x0, &(0x7f00000003c0)={0x0, 0x28, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) 01:50:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000002340), &(0x7f00000023c0)=0x6e) 01:50:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0)) 01:50:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:56 executing program 3: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000640)={"71ac3d5107282cedd54099d293203905aa7f5e903fb64506f78c8bb0de88", 0x7}) 01:50:56 executing program 4: socket$inet6(0xa, 0x0, 0xfffffffb) 01:50:56 executing program 0: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:57 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2}, 0x48) 01:50:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:57 executing program 4: openat$pfkey(0xffffff9c, &(0x7f0000000480), 0x2c102, 0x0) 01:50:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x0, 0x0, 0x0, 0x596, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 01:50:57 executing program 0: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:57 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 01:50:57 executing program 4: syz_io_uring_setup(0x61a1, &(0x7f0000000640), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x41e3, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 01:50:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 01:50:57 executing program 0: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:57 executing program 0: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:58 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:50:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:58 executing program 4: syz_open_dev$vim2m(&(0x7f0000000740), 0xb91, 0x2) 01:50:58 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 01:50:58 executing program 4: r0 = openat$random(0xffffff9c, &(0x7f0000000300), 0x309981, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 01:50:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x0, 0x0, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:58 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 01:50:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) [ 350.930071][ T9861] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:50:58 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 01:50:58 executing program 4: syz_open_dev$audion(&(0x7f0000000540), 0x20, 0x0) 01:50:58 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x0) 01:50:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:58 executing program 0: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x0, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, 0x0}, 0x0) [ 351.087472][ T9874] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:50:58 executing program 1: timer_create(0x4, &(0x7f0000000200)={0x0, 0x34, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) timer_getoverrun(r0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe2(&(0x7f0000000080), 0x80880) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0)=0x3, 0x4) accept4$vsock_stream(r1, 0x0, 0x0, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x1, 0x100, 0x6}, &(0x7f0000000140)=0x20) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat$fb0(0xffffff9c, &(0x7f0000000180), 0x10000, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) pipe2$watch_queue(&(0x7f00000000c0), 0x80) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$vsock_stream(r2, 0x0, 0x0, 0x80800) 01:50:58 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:50:58 executing program 0: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x0, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:58 executing program 4: syz_clone(0x820a3800, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) geteuid() socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x61a1, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x3, 0x164}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 01:50:58 executing program 1: bpf$MAP_CREATE(0x9, &(0x7f0000000780), 0x48) 01:50:58 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:58 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 351.254392][ T9897] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:50:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:50:58 executing program 4: r0 = semget(0x1, 0x0, 0x204) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x2, 0x2d5) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000000)=""/178) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f00000000c0)=0x3) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000100)=""/77) r2 = semget(0x0, 0x2, 0x10) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000180)=""/227) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000280)=""/239) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000380)=[0x2, 0x0, 0xd75]) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000003c0)=[0x7ff, 0x5, 0x7, 0x1e13, 0x6]) 01:50:58 executing program 0: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x0, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:58 executing program 1: syz_emit_ethernet(0x68, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x33, 0x0, @private0, @mcast1, [], "1be5"}}}}}}}, 0x0) 01:50:58 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f00000023c0)) 01:50:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1}}}}}}}, 0x0) 01:50:59 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 351.393874][ T9911] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:50:59 executing program 1: openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0xc3, 0x0) 01:50:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:59 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:50:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1}}}}}}}, 0x0) 01:50:59 executing program 4: r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, 0x0) 01:50:59 executing program 1: openat$proc_capi20ncci(0xffffff9c, &(0x7f00000006c0), 0x8ff80fc0367aad64, 0x0) 01:50:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 351.556318][ T9929] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:50:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1}}}}}}}, 0x0) 01:50:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801}], {0x14}}, 0x88}}, 0x0) 01:50:59 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:50:59 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x0, 0x0) [ 351.757021][ T9947] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:50:59 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:50:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:50:59 executing program 0: syz_emit_ethernet(0x67, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x31, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1, [], "1b"}}}}}}}, 0x0) 01:50:59 executing program 1: r0 = semget(0x1, 0x0, 0x204) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x2, 0x2d5) semctl$GETPID(r1, 0x2, 0xb, 0x0) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f00000000c0)=0x3) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000100)=""/77) r2 = semget(0x0, 0x2, 0x10) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000180)=""/227) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000280)=""/239) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000380)=[0x2, 0x0, 0xd75]) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000003c0)=[0x7ff, 0x5, 0x7, 0x3, 0x1e13, 0x6]) 01:50:59 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4358843f}, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xc8b]}, 0x8}) 01:50:59 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:50:59 executing program 4: r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 01:50:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) 01:50:59 executing program 0: syz_emit_ethernet(0x67, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x31, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1, [], "1b"}}}}}}}, 0x0) 01:51:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 352.409959][ T9957] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:00 executing program 0: syz_emit_ethernet(0x67, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x31, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "d782d3", 0x0, 0x2b, 0x0, @private0, @mcast1, [], "1b"}}}}}}}, 0x0) 01:51:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:00 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x0) 01:51:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'erspan0\x00'}}}, ["", "", "", ""]}, 0xff43}}, 0x0) 01:51:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xa, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 01:51:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:00 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x5, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:00 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c5a301b}) [ 353.338957][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:51:00 executing program 0: shmget(0x0, 0x1000, 0x2c4, &(0x7f0000ffd000/0x1000)=nil) 01:51:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:01 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 01:51:01 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000140)) 01:51:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 01:51:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0, 0xffffff7f}}, 0x0) 01:51:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:01 executing program 1: io_uring_setup(0x702f, &(0x7f00000008c0)={0x0, 0x0, 0x20}) 01:51:01 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 01:51:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 01:51:01 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:01 executing program 0: clock_getres(0x4, &(0x7f0000000040)) 01:51:01 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000100)) 01:51:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:02 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000100)=0x101) [ 354.460927][T10021] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:51:02 executing program 1: pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000480)) 01:51:02 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) connect$inet(r0, 0x0, 0x0) 01:51:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x8) 01:51:02 executing program 4: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:51:02 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000011c0)={@local, @remote, @val, {@ipv4}}, 0x0) 01:51:02 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, 0x0) 01:51:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x3}, 0x8) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x2}, 0x8) [ 354.653878][T10041] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x40c, 0x1, 0x824}, 0x48) 01:51:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:51:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8992, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:02 executing program 1: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/46) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 354.801204][T10061] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000020000008520"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x4c}}, 0x0) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 01:51:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x6, 0x1}, 0x8, 0x10, 0x0}, 0x80) 01:51:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x4c}}, 0x0) 01:51:02 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[{&(0x7f0000000140)='*', 0x1, 0xbf2a}, {&(0x7f00000001c0)='y', 0x1}], 0x0, 0x0) 01:51:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8924, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x4c}}, 0x0) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:02 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8}) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 355.107529][T10091] loop4: detected capacity change from 0 to 191 01:51:02 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000001680)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, 0x0) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3], 0x4c}}, 0x0) 01:51:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x801c581f, 0x0) 01:51:02 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 01:51:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:51:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8949, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 355.260905][T10107] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 355.311853][T10111] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:02 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) 01:51:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000f80)={&(0x7f0000000e80), 0xffffffffffffff23, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14}, 0x14}}, 0x0) 01:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3], 0x4c}}, 0x0) 01:51:02 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:02 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:03 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) 01:51:03 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x52]}}]}) 01:51:03 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) [ 355.471129][T10129] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 355.488744][T10130] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:03 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:03 executing program 0: sched_rr_get_interval(0x0, &(0x7f00000020c0)) [ 355.546337][T10137] tmpfs: Bad value for 'nr_inodes' 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3], 0x4c}}, 0x0) 01:51:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:03 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/220, 0x0, 0xdc, 0x1}, 0x20) 01:51:03 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000014c0)=[{0x0, 0x0, 0xbf2a}, {0x0, 0x0, 0x5}, {&(0x7f0000000240)="2173b9e5180e160798daab0759a48b85741e8a3899518c56877e65e3869bf5b6f8bf826996b5335634413d84d62f7718417c4c2718d793563e3d08636099dc8b559c28cf1636cdcc0dc7adf6e9701a61d58dbb23fed318e646ca39065dde463142350ed6b5d3d027064a80146513087570339dc6b0ae1d6cea60b4e84bea3ab32311e93ebaa75bb8afe491e296d6bf68bfa81f4a619a2c61e92795e748a7d656d041416d883a31975d0d770de409d4f3b460c8b3b90c555f51feca445ba9c395d9cac9f10b18440bc0a6486a21387e48b5e4c0c80cdf94d3bc4b9d19dfd7573784cf7c74d17cc505a00205b30cdb5f02a4b94b99e1c273770278d24e0b489da5c96f9051c9877e0cf13f7305c6fa36ae1c76eafb993b7f857356f7ee1da5bc2e3d2196703ed77d478e1883eccdaf713aa224969002dee631877c9a10754e79fc2c18e2be2cdde917fbb8d3589cb6caee5de628d6c6f3bccd9a05436d281c526831ef4a840fa062c991c2aec5c6107b626c0e1b89bae1f7fbad8332722b04ee665d563cb0573d1c92c21422ea2713b73beddec489271dfeda59d15b29cd2ca916085d5761257278b7d778c8ec23a025b4ce5df3f3631c0e02fc9f28c7686dfb131784720880f492613f99ccb305305b20b1135d1deac4468d3c6d91e742bda91cd111105b949a6b4a443626bda067cc7de91de90c5cf449eb8564baff0f95eea233e5520477aab56e081ab2321f6cd943f50f82bb09bccd66d1769cabc76f4bef971030f43e073bb4fc59319f706991f6a87fc0df984f50b8eb7231d4ca56ec47b19f8e3d33a1088ca80da0c29fe745a76452260f65377f5efa617f1e165294eb6217cb41e4dcfb54a7450c9d12b3a2c786bc27e3d69bf6e947f6a53460bcc67322ee78b23eed382c3ceb0809a1a21c2fe2aa7e5488eb935bd0cb788283039f0cd716addac0f5e90ca106c74499e78d7fa4c38056353d58be82117f25ca6ad167eadc33a8c73343154d7db48ddb71e36c46b44a22b79e617cc2f381179d40e37f329b5118c4457cf671cd5028bd022569c5f05b72f6c0fb5572d91e6f6577be9cbf2a8a71468e8ba6f8fc719f08e489a302fb990c10cd09066cd25e0edce202b30ebe018dd44dc78d0c1ae0bde346b800d357d93dd3d3dbf8009a731076c8a115c624f3915b5d54f0bbf0253daf29599101fd3970ffa7190a047b5cab0b3c8d0f17f5a4ef97e444719d6d6745194c01b1624c12647d63626eab9e332a43cee1dfe81d2c66ba54e28501cbe373e4d1f66998b87f7a91251fbfa9d7fc7d571a9e4847c468aa3272028f13a32414384ef2fdf300ec73ce7cc38411e574f060ec50bf6eee488ff69707ea8130d6463545cc3e760666ee8abf2ef1997fefdf91c9d741c38365a25fd3312391e4dea92b547bd15df6247935c320d5c7cdf61d5467192dc61c5280e46e78d3cd3ac641108a2b8dfab31eee8e5590884620c4da0d04f7a02775041a01a22f489f3985633e3703b4c66cdceb511ada03fa9d01227b8d638912e4b36dd73e1e202e2757147843458a32af314f86a449da5476ef35d39ecb8c765401b11ab4162124b7ad7c18e480821e99b1aeab644a15e73a192fb5643b98c19340516cb8185ec8dd3da493d4c58a5ea9fdc5b50b0ccef732a0adcad019a80826f6b21b99b2c8cd499a9c659dc2039b6ed4cde2b1d1fdf192c23a66cd3a5414be42d050cad16aca1e8287a302b3d77b96d11f2aed804fe027653602fbb9ee2cefb8a5dbc3eb6bdca1889181adf9b9eb41d7ee8df32f02ef096662adcb6152e70bd1e46f1fcfc2dc8f119005e1e7bdf1467287be3d2dfae54c5f90ace1f215692e5ce521d26bdd05faae9f4cf1703e557297bbb8621ff13c215123a322b7354f1884a031ce104cd14ac6bf24a0f628796d56a92dd39391fa4c97bc8b37e005b4bd2178dd114b41d6c615f8195c41ce881060127e24bb83f482c58a5f1a978f41202685fb73f25730c7f8fc756d650fef9ad0142548b119f83cedb46c34ea8bae523b59220afcc8be1d704fd723611ba64296f65a34a3b7432af4a5d8f2acd9f9405d6bb226226e6a58d8db86687e9ca02623c034b2397d09fe48c65585e29cf5a8fc8c730d72821bc39b4908f96451a7ab6949cafb839442d91fe0ac20f6417e54ec0961908343a5131e9fb09fc85453d47e9f6132a3e1a7517f727d56a156ab39d5681fc627af2bbb9295d6781f691bcf1ce6a450c3045df5d94069233233c1bb15f78fea86b1d51aca7c771ff4142c7492b96452a3d819c8681a263dcebd44ccee3b18a5a761cbc08ea747b7c4dab8d3acafcd6e9a91629ba123fc11fc69438c2a62b4ad6c5abc79e604c162ce5efb1d0c789fd576edf531ea738ad9f677f3a307a8534468df41505066f7b2bf1d3be0a2c1fe6be4513eae5243eea2b0d870a7f3b1ab7056c76ef1a70d895975cb73aaee09d0fc3c0aa983878d40c200402fe17890794d11015a47a2dc9a1b0f4145f36db29780db6ab5bb71661a22a26d789e5e84e27cc350dedc75847d6f2492af5222cebb328d74d6684d856deaf4dc1395a5cf6a339d6d002ad82375312e1cec7d580056a01508d790f2959090674c58d474f7a990bca0a6e5875aee62dd1e7599aaa2ebbeec75bb3c7d7747d971dc1ffd5902d8341480682b596efc0efbbf03b753ad7846a08cad2b513b8939cd2d0815b8cd81394b9f8b103aed146d5052dcdb47e3c4d49fa97c0d9d8a2779981e777fbe3d46b0224838bbf00f14810170e54a4d357be6d5622cd80cdc9dd7b774db5c5880d349adbb1854a66ba02f7138e9d1b972d566f34a4a347b062721e8b6eb9a2fe97cc2546cd1a180fdfba5d1f0db00f69dd82a660a3d47fb0e1185a6be93804c90bd94489a87260b48897c3e48af0f94b9b98633067bd3824e7729491dd30cbdd4f5dea1f7cdae44d4edec8795023755d981a3b0a76c48f02da857cd24c5e909cb0ec82231cc72dafb8ff5e10ff8c11d3ff32c25fe79c5c6347be4a35c7261a30b336f019288d9dc2d17102ec5b09e9dba357b15bbd1e89dd6c49d64a6f9d9207373a0f5cc4840c028b3a8a3e9fd25fb5d1e453da8956450a31146a1120df1d3d7cd4a8575c4468a15a91c8dc4920a382290ea893c10a0d5174ce23e463cd48565da2248a123ba80539462b270", 0x8d0, 0x6}], 0x1000, &(0x7f0000001580)={[{@nodots}, {@dots}, {@nodots}, {}, {@nodots}], [{@uid_lt}, {@dont_measure}, {@fowner_gt={'fowner>', 0xee00}}, {@hash}]}) 01:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) 01:51:03 executing program 1: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x3, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x14000, 0x0) getgid() r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x20800, 0x12) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000480)={{0x7f, 0x3dcd}, 0x136, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 01:51:03 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) [ 355.731683][T10156] loop0: detected capacity change from 0 to 191 01:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:03 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) 01:51:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000010c0)) 01:51:03 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:03 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42402, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000400000000250000000e0001e8"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) 01:51:03 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x100000) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) 01:51:03 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/iscsi_session', 0x0, 0x0) 01:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x0, 0x3ff}) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd68000802110000"], 0x4c}}, 0x0) 01:51:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1400000080344f"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000b80)={&(0x7f0000000a80)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000001fc0)=""/4096, 0x1000}, 0x2) 01:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:03 executing program 0: setgroups(0x2, &(0x7f0000000640)=[0x0, 0xffffffffffffffff]) 01:51:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) 01:51:03 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 01:51:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd68000802110000"], 0x4c}}, 0x0) 01:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:03 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd68000802110000"], 0x4c}}, 0x0) 01:51:03 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@size={'size', 0x3d, [0x37, 0x0]}}]}) 01:51:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 01:51:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x894c, 0x0) 01:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000"], 0x4c}}, 0x0) 01:51:03 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:03 executing program 1: mount$cgroup(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)) 01:51:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:51:03 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:51:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 01:51:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) 01:51:04 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x6, &(0x7f00000000c0)=@framed={{}, [@jmp, @map_idx]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0x8, 0x10, 0x0}, 0x80) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000"], 0x4c}}, 0x0) 01:51:04 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:51:04 executing program 0: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x1, &(0x7f0000002840)=[{&(0x7f0000002540)="a3", 0x1}], 0x1002440, &(0x7f00000028c0)={[], [{@uid_lt}]}) 01:51:04 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0}], 0x0, 0x0) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000"], 0x4c}}, 0x0) 01:51:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xc, &(0x7f0000000000)=@framed={{}, [@ldst, @ldst, @generic, @map_val, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call, @alu]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050"], 0x4c}}, 0x0) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 01:51:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='syz_tun\x00') 01:51:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0_vlan\x00', &(0x7f00000001c0)=@ethtool_perm_addr}) 01:51:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x2, 0x0, 0x40, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)}, 0x80) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:51:04 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x3, &(0x7f00000014c0)=[{&(0x7f0000000140)='*', 0x1}, {&(0x7f00000001c0)='y', 0x1}, {&(0x7f0000000240)='!', 0x1}], 0x0, 0x0) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050"], 0x4c}}, 0x0) 01:51:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 01:51:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f00000007c0)) 01:51:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_modinfo}) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050"], 0x4c}}, 0x0) 01:51:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:04 executing program 0: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) 01:51:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd68000802110000010802110000005050505050"], 0x4c}}, 0x0) 01:51:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/loop0', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x0) 01:51:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f00000011c0)) 01:51:04 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f00000001c0)="89", 0x1, 0xffffffffffffffff}, {&(0x7f0000000340)='W', 0xfffffffffffffdef, 0xffffffffffffffff}], 0x100004, &(0x7f0000000680)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x36, 0x2c, 0x2c]}}}}, {@huge_within_size}, {@huge_within_size}, {@mode}], [{@euid_lt}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'y^-'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[(/\x7f\xba\n%\x1dv Q\xa5\xfc\xae\x8c\x90;q\xc1\bxh\xaa>\x9dL\x1a\xae\x95\xa8\x85\xa2\xc7\xcb\xcf\xb9\xc2\xe9\xaf\x11\r,\x81\t]P\"I5\x16\xcd\x920bQP\x99\xbb\x98y\xba\x05\x16]\x9br\xa6C'}}, {@smackfshat={'smackfshat', 0x3d, 'security.selinux\x00'}}]}) 01:51:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x54}}, 0x0) 01:51:04 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x200002, 0x0) 01:51:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000200)=""/220, 0x36, 0xdc, 0x1}, 0x20) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd68000802110000010802110000005050505050"], 0x4c}}, 0x0) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x54}}, 0x0) 01:51:04 executing program 4: add_key(&(0x7f0000001000)='syzkaller\x00', &(0x7f0000001040)={'syz', 0x0}, &(0x7f0000001080)='t', 0x1, 0xfffffffffffffffb) 01:51:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5}, {0x3}, {0xb}, {0xb}, {}, {}, {0x2, 0x1}]}, @var={0xf}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/220, 0x70, 0xdc, 0x1}, 0x20) 01:51:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x54}}, 0x0) 01:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd68000802110000010802110000005050505050"], 0x4c}}, 0x0) [ 357.548644][T10305] loop1: detected capacity change from 0 to 32766 01:51:05 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:05 executing program 0: sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x44005) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)="1b40de381517b51907a2", 0xa, 0xfffffffffffffff7}, {0x0}], 0x0, 0x0) 01:51:05 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@size={'size', 0x3d, [0x78]}}]}) 01:51:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3], 0x54}}, 0x0) 01:51:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 357.679367][T10333] tmpfs: Bad value for 'size' [ 357.699237][T10335] loop0: detected capacity change from 0 to 16383 [ 357.710991][T10336] __nla_validate_parse: 9 callbacks suppressed [ 357.711006][T10336] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 01:51:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3], 0x54}}, 0x0) 01:51:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8932, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) [ 357.728290][T10337] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8990, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) [ 357.818596][T10339] FAT-fs (loop1): bogus number of reserved sectors 01:51:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 357.862958][T10345] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.881583][T10346] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 357.942474][T10339] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:05 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x24}}, 0x0) 01:51:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3], 0x54}}, 0x0) 01:51:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x0, 0x70bd26, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}}, 0x0) 01:51:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='macvlan1\x00'}) 01:51:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r0, &(0x7f00000017c0)='W', 0x1, 0x0, &(0x7f0000001800)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) 01:51:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) [ 358.130560][T10356] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 358.166044][T10360] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 358.276372][T10363] FAT-fs (loop1): bogus number of reserved sectors [ 358.282926][T10363] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt(r0, 0x0, 0x6, &(0x7f0000000000)="10", 0x1) [ 358.326444][T10370] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:06 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:06 executing program 0: ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r0, &(0x7f00000017c0)='W', 0x1, 0x0, &(0x7f0000001800)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) 01:51:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) 01:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x3c}}, 0x0) 01:51:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8918, 0x0) 01:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 358.550400][T10384] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) [ 358.612807][T10386] FAT-fs (loop1): bogus number of reserved sectors 01:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) 01:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 358.656311][T10386] FAT-fs (loop1): Can't find a valid FAT filesystem [ 358.766834][T10397] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:06 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:06 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x0}}) 01:51:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x54}}, 0x0) 01:51:06 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x900000, 0x0, 0x0, &(0x7f0000001fc0), 0x0, &(0x7f0000002040)="9e") 01:51:06 executing program 0: mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x300000f, 0x30, 0xffffffffffffffff, 0x0) 01:51:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 358.945735][T10407] FAT-fs (loop1): bogus number of reserved sectors [ 358.954726][T10410] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.985727][T10407] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x54}}, 0x0) 01:51:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:06 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='pids,cpuset_v2_mode,none']) 01:51:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0xd0d, 0x1, 0x9}, 0x48) 01:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x54}}, 0x0) 01:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 359.210682][T10429] cgroup: none used incorrectly 01:51:06 executing program 4: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd']) 01:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:06 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x1e, 0x0, 0x0) [ 359.345870][T10438] fuse: Bad value for 'fd' 01:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_1\x00'}) 01:51:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 0: r0 = getpid() migrate_pages(r0, 0x22, 0x0, &(0x7f0000000040)=0x8000000000000001) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x3, 0x0, 0x0) 01:51:07 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:07 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000bc0)={0x0, @rc, @nfc, @hci}) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:07 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000001840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 01:51:07 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setns(r0, 0x0) 01:51:07 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:07 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setns(r0, 0x0) 01:51:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1}}) 01:51:07 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x894a, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:07 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setns(r0, 0x0) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'sit0\x00', 0x0}) 01:51:07 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setns(r0, 0x0) 01:51:07 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:07 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setns(r0, 0x0) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x6b, &(0x7f0000000080)=""/107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:07 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:07 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setns(r0, 0x0) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:07 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) 01:51:07 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setns(r0, 0x0) 01:51:07 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) 01:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:08 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, 0x0}) 01:51:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:08 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) setns(r0, 0x0) 01:51:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:08 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) 01:51:08 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x88, &(0x7f00000000c0)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:08 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x42, 0x0) 01:51:08 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) setns(r0, 0x0) 01:51:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:08 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) 01:51:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:08 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) setns(r0, 0x0) 01:51:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:09 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:09 executing program 0: add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @desc4}, &(0x7f0000001200)={0x0, "cdcc5b3b86d3f737352ae2f4ea67ef951c5cfde3086b3e2402ffedc857aa435bb423a798d8729a4a52f0e0a8fccf069183d2a065b996224fcacab5c5a4f22d99"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) 01:51:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(r0, 0x0) 01:51:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(r0, 0x0) [ 361.606810][T10595] FAT-fs (loop1): bogus number of reserved sectors [ 361.642608][T10595] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:09 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x3, &(0x7f00000014c0)=[{&(0x7f00000001c0)='y', 0x1}, {&(0x7f0000000240)='!', 0x1}, {&(0x7f0000001240)="db", 0x1}], 0x0, 0x0) 01:51:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:09 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(r0, 0x0) 01:51:09 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(0xffffffffffffffff, 0x0) 01:51:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) [ 362.271742][T10605] FAT-fs (loop1): bogus number of reserved sectors 01:51:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000200)='!$\\#@-]/\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) [ 362.329135][T10605] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:09 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(0xffffffffffffffff, 0x0) [ 362.490940][T10621] FAT-fs (loop1): bogus number of reserved sectors [ 362.503793][T10621] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:10 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f0000001b00)='./file0/file0\x00', 0x0, 0x0, 0x0) 01:51:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(0xffffffffffffffff, 0x0) 01:51:10 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:10 executing program 4: r0 = syz_open_procfs$namespace(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setns(r0, 0x0) 01:51:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:10 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000000340)="96", 0x1}], 0x0, 0x0) [ 363.226948][T10633] FAT-fs (loop1): bogus number of reserved sectors [ 363.237971][T10631] __nla_validate_parse: 15 callbacks suppressed [ 363.237988][T10631] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.252603][T10633] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:10 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@fat=@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:10 executing program 4: r0 = syz_open_procfs$namespace(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setns(r0, 0x0) 01:51:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) [ 363.433426][T10645] FAT-fs (loop1): bogus number of reserved sectors [ 363.468503][T10647] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:11 executing program 0: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 363.471172][T10645] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setns(r0, 0x0) 01:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:11 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@fat=@debug}]}) 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(r0, 0x0) 01:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1, &(0x7f0000000000)=@raw=[@generic={0x18}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xf8, &(0x7f0000000140)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 363.723267][T10669] FAT-fs (loop1): bogus number of reserved sectors [ 363.729819][T10669] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(r0, 0x0) 01:51:11 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb0}}, 0x0) 01:51:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:11 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@fat=@debug}]}) 01:51:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(r0, 0x0) 01:51:11 executing program 0: r0 = msgget$private(0x0, 0x100) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/14) 01:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 363.962507][T10690] FAT-fs (loop1): bogus number of reserved sectors 01:51:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8994, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) setns(r0, 0x0) 01:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) [ 364.005877][T10690] FAT-fs (loop1): Can't find a valid FAT filesystem [ 364.022358][T10697] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:11 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@fat=@debug}]}) 01:51:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, 0x0, 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 01:51:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) setns(r0, 0x0) 01:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000000)=@raw=[@initr0], &(0x7f0000000040)='GPL\x00', 0x0, 0x38, &(0x7f0000000080)=""/56, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) [ 364.186188][T10709] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.222953][T10713] FAT-fs (loop1): bogus number of reserved sectors 01:51:11 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) setns(r0, 0x0) 01:51:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:11 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 364.315321][T10713] FAT-fs (loop1): Can't find a valid FAT filesystem [ 364.327210][T10724] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 01:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) setns(r0, 0x0) 01:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:12 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 01:51:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000040)) 01:51:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) setns(r0, 0x0) 01:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 01:51:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 01:51:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) setns(r0, 0x0) 01:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:12 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0xd, &(0x7f0000000080)={0x0}, 0x10) 01:51:12 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x141002, 0x0) 01:51:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) setns(r0, 0x0) 01:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:12 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rpc\x00') 01:51:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) setns(r0, 0x0) 01:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050505050"], 0x4c}}, 0x0) 01:51:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 0: mount$cgroup(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, 0x0) 01:51:12 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x23, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:12 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) setns(r0, 0x0) 01:51:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 01:51:12 executing program 0: r0 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='-\x00', 0x0, r1) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(0xffffffffffffffff, 0x0) 01:51:12 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @desc4}, &(0x7f0000001200)={0x0, "cdcc5b3b86d3f737352ae2f4ea67ef951c5cfde3086b3e2402ffedc857aa435bb423a798d8729a4a52f0e0a8fccf069183d2a065b996224fcacab5c5a4f22d99"}, 0x48, 0xffffffffffffffff) add_key$user(&(0x7f0000001280), 0x0, 0x0, 0x0, r0) 01:51:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)='P', 0x1}], 0x1, &(0x7f0000000440)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}, 0x0) 01:51:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xffffffff}, 0x7}) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(0xffffffffffffffff, 0x0) 01:51:12 executing program 5: socket(0x74bee96529fdad2d, 0x0, 0x0) 01:51:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, 0x0) 01:51:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) 01:51:12 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setns(0xffffffffffffffff, 0x0) 01:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000200)=""/220, 0x26, 0xdc, 0x1}, 0x20) 01:51:12 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)="1b", 0x1, 0xfffffffffffffff7}], 0x0, 0x0) [ 365.456811][T10837] loop1: detected capacity change from 0 to 16383 01:51:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:13 executing program 0: migrate_pages(0x0, 0x0, &(0x7f00000009c0), 0x0) 01:51:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000040000000025"], 0x3c}}, 0x0) 01:51:13 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) 01:51:13 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='pids,cpuset_v2_mode,non']) 01:51:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1, &(0x7f0000000000)=@raw=[@generic={0x6}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xf8, &(0x7f0000000140)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:13 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x10}, 0x10}}, 0x0) 01:51:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x1000) [ 366.148230][T10847] cgroup: Unknown subsys name 'non' [ 366.154792][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 01:51:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x5, 0x1}]}]}}, &(0x7f0000000200)=""/220, 0x36, 0xdc, 0x1}, 0x20) 01:51:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xffffffc2, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xdc}}, 0x0) 01:51:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs, 0x6e) 01:51:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:14 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) 01:51:14 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x88, &(0x7f00000000c0)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:14 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000002840)=[{&(0x7f0000002540)="a3", 0x1}], 0x0, 0x0) 01:51:14 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x1e, &(0x7f0000000080)={0x0}, 0x10) 01:51:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x844, &(0x7f0000000180)=@abs={0x1}, 0x6e) 01:51:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:14 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_GET_SECCOMP(0x15) setitimer(0x2, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f0000000340)="96", 0x1}, {&(0x7f00000003c0)=':', 0x1}], 0x82020, &(0x7f0000000500)={[], [{@dont_measure}, {@pcr}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_role}]}) 01:51:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x44005) [ 367.123566][T10884] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 01:51:15 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x22, 0x0, 0x0) 01:51:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001740)={'syz_tun\x00'}) 01:51:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f00000013c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1}}) 01:51:15 executing program 1: sysfs$2(0x2, 0x5, &(0x7f00000001c0)=""/247) 01:51:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x200000000000015e, &(0x7f0000000800)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_channels={0x1}}) 01:51:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d0"}]}}, &(0x7f00000002c0)=""/134, 0x2a, 0x86, 0x1}, 0x20) 01:51:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:15 executing program 0: r0 = openat$null(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x210010000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 01:51:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file1\x00', 0x0) 01:51:15 executing program 5: r0 = msgget(0x0, 0x9) msgrcv(r0, &(0x7f0000000000)={0x0, ""/83}, 0x57, 0x3, 0x1000) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/77) 01:51:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:51:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x4) 01:51:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f0000000080)) 01:51:16 executing program 1: timer_create(0x0, &(0x7f0000002700)={0x0, 0x0, 0x6}, 0x0) 01:51:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x003'], 0x54}}, 0x0) 01:51:16 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="0106000001", @ANYRES32]) 01:51:16 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x153640c1b56108dc, &(0x7f0000000180)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}) 01:51:16 executing program 0: openat$vsock(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 01:51:16 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0xffff8363, 0xc0c0) [ 368.918072][T10931] autofs4:pid:10931:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1537.4294967041), cmd(0xc0189376) 01:51:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x89a0, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @local}, 0x1c, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_bond\x00'}) 01:51:16 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) open$dir(&(0x7f0000000e00)='./file0\x00', 0x20140, 0x0) 01:51:16 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockname(r0, 0x0, &(0x7f0000000000)) [ 368.976286][T10931] autofs4:pid:10931:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189376) 01:51:17 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000180)=@raw=[@initr0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:17 executing program 3: io_setup(0x12f5, &(0x7f00000000c0)) 01:51:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='check=relaxed,']) 01:51:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) 01:51:17 executing program 5: r0 = msgget(0x0, 0x9) msgrcv(r0, &(0x7f0000000000)={0x0, ""/83}, 0x57, 0x3, 0x1000) msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x4, 0x0) 01:51:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r0, 0x84, 0x4, 0x0, 0x0) 01:51:17 executing program 1: socket$inet6(0xa, 0xe00, 0x0) 01:51:17 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)={&(0x7f0000000c40)='./file0\x00'}, 0x10) 01:51:17 executing program 3: mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x2040, 0x0) 01:51:17 executing program 4: openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 01:51:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {0x200}]}) [ 369.907430][T10952] ISOFS: Unable to identify CD-ROM format. 01:51:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x668041) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 01:51:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x6, 0x0, 0x0, 0x4) 01:51:18 executing program 0: syz_read_part_table(0x9, 0x3, &(0x7f0000004280)=[{&(0x7f0000000000)="b7f2bfa2ce6bed96e8b6f3011c2a958bd1d19b54801e9d10fac6012e3300a6719017023654245abdbb79e0593adaa2aef194b67c001490e894b33e672c4704d56e7644a552580154df28ed5bf1ab629c255a49fd1ffc11c8d22cdfbc996151f42a9636dbb05419fead2848e2cf8b2848e7785fffc201ca52023fa6e00f6d23384fcf70c34a171656b2c1ec959c3040fd1fc320ab4b10b2fec3921eb9dd2d9d336b20fcebabdbb19be10d443095ec7a97254ba963ffb2a268270906fa79e2fa2f080b425578845fcbd49246113f78ba9bdaf275b9944fe8ddd5a66cb3352c39204df3a6fe9f9a477c84762bd25722421394565d4150b1c08c4c0b2d36934beb2e507b60789621c100a9c32a33d4a558bd8e2f9e43df0a6543e6a0f1c651b8d84fcc01c3f177824b9989a1f368ea44ac744bee0d66ab4a53edcf0b29b0033a4f8e12929dff7f4ca5d9781a7388f27e6b50254d0d37c2a2b5b67eb658a5c4486bbe6726fb3161cc8bcc6d92ff157bde768373f811079ca179968e804b481a289ac0ed830a75e9c79146b4a25e90f361adb119a9f4d527cf8e10229c687f46007f3a2fa1619dc3cf965536e3a1a9ac8a837d9d674f209c35ed33f6f987a19ac1db9eb58328b07cf7822ff865bd90ebb9ee8cd97911042b331ce32602a4877146ace3fad6e467d528629d4894183ffa2f3b1ad868fc53030235ab71aebe612acdcc85ce5e97b9599a20ce68a919737a90473544c763e67eefba2343ac38dc3733af4bb5c4e29e4a613e0d7081f453ba05cc833fdc1485991e8bc2ad2fa05a13c44b1f6df0c45b57b13b50db3f35e3cf41b1b70045c20122ca58d9bb335c420a37272342e4f0dba2b0399e6c71b874d059d43c8f037b7c4ffedd86936fc033162150079a762f662bf75e350f6fda8523bcd68b55a4ff0b8a79b026f9f3098bd8f8371c275e4f462d29246d3810f75a2aa99da595789f819ad497698115a03a0afe7fad13d343ff74b5339a5c3fdc562cc20ac3171482eab1464a846f9f46cdfe0ef13d5b4a3c5b1b4289cea4139841b7b244cca71b8230788827252f664df66d9862a63bd453a72fb49e16b8b5df534da464f1d077c2966bfc0248d76ea4935574bf4f41861cdb6adeba8eb589bd7855f2ce8a3d2b7d77ed333f14b4dd342a80f3261977e5dab420e09a0f38d801f87c56d8df76cb31140d183d875b0876c82ebb6f023361bd5823e4ca019de66630e863f5b552e128d0e607f4203f5d37092ca8a8a03e53f5f2ff9b98672886d7ab77c2969bf5a8dcdbb07fe42e40381fddc0724ae81ef3a47f572f5329416d7cfb0a43485c6a359511e9e2dfa22491b5bca2966805cb90a9004e25a005fb802b1b198181f3a625dadfa1ee4cc21ba787f67fc683f84721896bb2438cff26ce2f3a2fabc00ae74f1f642ba952ac6b0d92de4137ed736d08b946ff0fdd5d08d00ffa80f115000e8af5f0dc1de8940f4057791529431975f8273e8eed2bfbad95ff8f4c430099c8528a470e86c1e1915a102fbe02d5c961229353a04fd087a8cc1d2f59bb0dfe827339deb6558c0bbef6392bc549dca63e0d848baf2de6a530757bf05976f1b3c996483c47dd070daed6c29e6497aeaa79357f7332251564a133b0f10ef82be87c52d98f118a5e4596c8e1eb70c2e2038cb904348ceccfbf6e761bef1f712a4b2de1f4c649b0090e5c9eb0863331668b415a1137c222814b13dc05851676d2f809460cf9ff2bab3474bcb4413d69881c69d68b06d700235b31f52dabb35552d89d472c14e5626986f33059073267c8e76836964c8e4f178bbc6367bd88dedc82eb0c89531b97785f73a90b1af8009e28d3518a69a510b844d3eb96833b20ed5a2ef7e3d984d8729b9af463fe9e3d815ce305aea689985566f4299bc8e202ce7ce5e4520bdbc77500edf5c28ac7bc6148d3d61b6893546c44c19d4a87d02a3bad1e00a4f088b175be14d508d16519c6323ae672b21a026cbc976b4e18903222ebd6f7ad6da67139c941d65d30e53412a3cd5706f970ab9a971d97c05e4248a259cebece114cca742bc8e43f4aaa8e745daceb3918aa14b2a6f5c2cf98e928e6b96c6a2af73fb643c0a94be5322ebf16114bfe390c959792d3ba4c682b04d4057ec545b13c85bb2e649451d3ed1efd3e71cb41c68443398babf46f2c634a7ac4321dfe487f2f6df13b1c721f0a53f0e3a712950dd879bc9c73e09ec4249b7af3454ead312b57f2d2d4ec5be2154abe18347cb863961c11d79869c92e92aa5e4869ab0269d950dc45c1748607dcffcf753c859e2a511ab9257ed1fdef437bddbc70d2c8c6f8867be97b84181760b01344b0a6463f32deb3ac23531464551566b38f85c52e8039dce3fd16a89a0d1a66fb830e694a4ebd77f8e1955f06b7ecf23294170636bc4ffcb6598d57c286a81eefe06653497d3e3370a5a044d599c09b423ef4f42781f5b121607db760333098d360eeecdd5d1d541ae4f3593cf32b5aa79363258e4a96f3dd299c9c37d8ede6d79138c97a3d29547b9cdab040f25f48486b52c00810344c48e849a4f65f94b105058d2e350aa2b0b9041822f8368026e8edee1f8e0d0325f0103094e0028e24975c1bdab3082b7b4d04c91906956b9c97b57ba9cc49f88698cac8c2d060f97246b0a0424ff72968670124dc4390bbdb5161490ff245e992199827dd17e8431a0590c25d316c083ec0bd671b9c53809e6e72a88a1fc40b504e4617b612039297c29694336cb8198f42d826b1707c0fe8e3e068607526153277e6d758e9ce734e3b066a326fc911bb4178f6d8de92b1e3cc0de10b43d22fb4f1847aa9153bb286cd7d2466a74283626eb9cbcbd0f1655284aa579c5983ce561d5cbb518a22283efd74eb691ffef5318bfbc05dfa7a218f40a64f06dac7079d7f43811afbea81d4a6f5578cd9b224e6f33daa183ce0887b6a7270b82675c0e5706350fd5526f5973734ec272c24a496f9aa5d98c0e4d693a25ca2cd1638c45adfe2559d072493a90e63f7422e0f8284318c3af4251bdabda563aee9c17e651aa4847444e697809f8364f656e76c018506f936ec02b362365f543df389895edb12ac184a31e61199d2eb2b0b203bd6e2e9b8104549bc61da016e99fe0dbc945e50b75f2e8e704c8525687f92b28fe03ab048e4c69c65ab30be0ece302af544fb37c5900e388fa6f5947253213e2285dbd74599defe2ba16515534253e7e01e675f856166d8ea5761d69214a2ea16fbc638b3bbc10876145bd2147b21266efbac8a185283e4a2991170a6fa998419fa7742208856b3bb86c3129aea7f0dce64464770f50b4b6d785bdc585e4d1543c9dbca64bd8df180809c2b9a5a7a72c31882bf96469571aecbae24da261c0b408d40f6b9939590676ddc156024ff53625cca6c7a313054bacce0c33292e4f4632f1f1fbca66d7a67bd698c72848563eb91f196368e17ee90d7f9937b2ef1fcb404acdfdcc61fdf9d83a94e4e94f75519c26fadb17ae1a6432fa88ba1b1e9f53625fc607593a3be494c9de66e7872d89b22f9d2d825fbafdf80b0c0806b009c333404b89fe12d61b92d15683cfc73e54972d422effcace291c264fcaa87ae0b017061408537d2e3e8d33b423ef289c9ff4972ad0f0ba58f7cc44f613d47eaea382a3c2581f130169585651e52b23d6bb3cdecfcbcca9d9165425441370192c19131d3ff123bc5fcb1bffd0634f5b8d1e39ae73885b547af1abe7e111604797968f4a37d80f3410f923d0b5474e101e313dd0c8478d38e80113b13d16cedfdb278494f0717926d10dc36365334eab95ab4499f826fbafb9370fff49e7899b0a908818b9cf3cf4efbc4237a563548452ac10fe38e347ace447246910c4591c207d79df3fbe7a6a0fc8100d40c3a8b72675a51c980d4ba793a3fe8cf02ddc460ded92128f309c427af1116e005fe74f489fa0e47b1d1e912137352000094481dafbc2c5b8c33354569436bc3d396a8946ba05fc0189fb4c642306ef8a4c2d1a518aa3afabb91d6a70b3aad835d2f6d71e02f336102b58f2ac0bc8b1ad77273f060f18fa531969bc8c833cb58a7838ae973e0f99059617914af5413968f1ad7dfcfccaad29af447bebec37591938c382ae874147fbccf03d8e3a8a4aeb24e0d661ade8b202d0cce874a07d54eaebcecfacc16be90bffc23deda8938128fb181fffd239013043ffcab7c140c2a8ff8f30c73c18a4121e38940fcc77348557c525385b701069d22ca0a35b14e5cf23045e42563a20a6e2c18fb5bc961c4069e1f7fd6967a7085274135e1f7a975428762284b6fcbb85f8220b2b8860ba95b33ef70a98ea7ed2478f1c8b0971ca04f948b9d36712bd90d0714db8898ecf765847f9dcb909dc036ac42720f8ecd54661c34a9403ba30dd2e18d85878beb6d03c9300aa51534eb00e3e3f1e3edd1f456d4e65939d2c5b2942d427d5a8b97c8022e3296eae341391690345dfd838f56d582a3a0df183f57e1a59ad63b8313d6ceda77226212b03a00ad00196d690dc200648c7819e8ca88dcf7a95fec8d5b1685b04ead8cfdeabea3fbc120909a863e46846953e3970bc998b987abc53b931e4193716c74686508c1152498d33ad2c7bc367d356663c4857e71b14a1c71c520c9e02df75d6fb3a921019a29d79100b5f8f15779341f36fce03f22d5a5e0ec47eddc370b31cdfb68ac2ed01c77db0061dfa4791a31b87235219e46353bf62929e6e0579375d36527c1b4a7115c896cf831f0f7e7f81d591e95f0267db2f85ed0312b7c12836263971696093c979d6bf06c77bdb905b35ce5bdeaf6f76435edd2889ff19515652e52e5ca73abc1c64e6b5eabc39e374aa45ad8ca56768d6b7b3418a627bc4a1912fae9b74da511e80671063c4c58519673b2ef90d8c1d6f983e5357455ec6aa98dfc1e78c07293b8e5029a1099c28d858d43201d0f7174a33116581e6439208d69a5bddf78466f3bcc26aa7abd59e089e721d8c5ed084177e98516ca9c9814f283f1914cf8fc51f1bf74ddb5dafa0d1b0072a645e075b310a48f667af1549dc4323a3cddeb9feab20b7b40e0e8abcdbb0e1c4b356fcde4ea2455de31f8fed133be1058eba97ce789531c5a2cc57df717ded354d9af02dabe4e7396516fce7e738edf45d62507755b6da1579454c8824e1ac2193748c1c2a247c7245ce86748aca1805daeb3a68e81d63d66133c2806403f3c59faa5fb44adbdb4f0dd498f2fd50ada061b3d66055bc0e2504d4f68f7ee26e4db763cd431fd560a3a3646f16d85817496d381bbaea8eddaba1bcd8ebf2f5c222961f61afe2a80e831cda683a5cfbea3d4547a0df404f90698fcbe43515fe54b4b57b6b3c982129a01229c206c91c3e7cfd9de5b714f3aeaeaa343b680de7a60e93bace589ad0845242c6367f7f8daa46e686570103a4eeb14d0ced4eca88dcbf4c388b1da7dd04d0eb24d5c1332c4d03170ce4207b7b2e18c5b665f6295b83c810936c5edadaa1cfc882322ecaac000d5ee038794da734764eecaa3eeb56f6e1e68accbe761a25b7d8f9f85957db7c6f1ea54c09dc304266b9d761a1fbbe2c31fa3e4ee9db8abbd1dbea7b2fc6b6700f1010b0185b0a5efa4e7c542ac88f39fcb2c99ef5e642bf20dcd60d2ca5b863d7ae5b2d4729cedc282f8f04ca5ca6b3f5f8dcae6f09c7a7579acb1e2f4ee8242ec9c0db8e14d96de93f56bdecd4929976e2acb0878703812acc0b8095c635ace0298fdc79cd0f418d64d7aeeb6e044b378a79ab554f534705e", 0xfff, 0xffff2338}, {&(0x7f0000002000), 0x0, 0xffffffff}, {0x0}]) 01:51:18 executing program 1: io_setup(0x12f5, &(0x7f00000000c0)=0x0) io_pgetevents(r0, 0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 01:51:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, 0x0, 0x0) 01:51:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xfffffffffffffe3a) 01:51:18 executing program 5: syz_read_part_table(0x0, 0x5, &(0x7f0000004280)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d", 0x1a}, {0x0}, {&(0x7f0000003040)="c59e666b6723cabde7fcf8275a5172730bfddc43010831c40fa04a5b3f4dab320d30d850993dc8d3888a4ff4eb2138513008166d5136daac08f16931796f191b567566f2d10596c3cedd4530d7bbebca3587676f4cec736e8f4b047547f5bfc4b92851f5d2c7b8", 0x67, 0x2}, {&(0x7f0000003200)}]) 01:51:18 executing program 4: openat$vfio(0xffffff9c, &(0x7f0000000140), 0x40800, 0x0) 01:51:18 executing program 3: io_uring_setup(0x8bd, &(0x7f0000000380)) [ 370.686623][T10981] loop0: detected capacity change from 0 to 264192 01:51:18 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 01:51:18 executing program 1: r0 = io_uring_setup(0x4411, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) 01:51:18 executing program 0: rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x8}) 01:51:18 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030fb"]) [ 370.828756][T10994] loop5: detected capacity change from 0 to 127 01:51:18 executing program 1: io_uring_setup(0x0, &(0x7f0000000380)) 01:51:19 executing program 3: openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 01:51:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 01:51:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x8905, 0x0) 01:51:19 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 01:51:19 executing program 0: execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x200400, 0x0) 01:51:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8914, 0x0) 01:51:19 executing program 0: io_uring_setup(0x0, &(0x7f0000000380)) r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f0000000200)) 01:51:19 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x27}, 0x14) 01:51:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x4, 0x0, 0x0) 01:51:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x4) 01:51:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8918, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_bond\x00'}) 01:51:19 executing program 1: syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x1) 01:51:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:20 executing program 4: syz_read_part_table(0x9, 0x7, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}, {0x0, 0x0, 0xd8c}, {&(0x7f0000003200), 0x0, 0x6}, {&(0x7f0000003280), 0x0, 0x800}]) 01:51:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x89a0, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_bond\x00'}) 01:51:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x5451, 0x0) 01:51:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x89b0, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_bond\x00'}) 01:51:20 executing program 0: r0 = msgget(0x0, 0x9) msgrcv(r0, &(0x7f0000000000)={0x0, ""/83}, 0x57, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000080)={0x3, "74fea409c1c1a5b370064e6f4a3fbf8e78bcf67126c95ebfef712bc9b61fb31ab533bfd25cc0ab4c088074a3b8779ca7dfda69aadc602a58470d1ddbf0ec49fd1396997ffa9851a928be2f3d94c328242bf03083c789e6861c33c8"}, 0x5f, 0x12580828f50b1260) 01:51:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 01:51:20 executing program 3: timer_create(0x0, 0x0, &(0x7f0000002740)) 01:51:20 executing program 5: io_uring_setup(0x5, &(0x7f0000000000)={0x0, 0x800, 0x8}) [ 372.533579][T11044] loop4: detected capacity change from 0 to 264192 01:51:20 executing program 4: syz_read_part_table(0x9, 0x7, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d0238a351cdd48941d010b8ea66d811f3123a777ef5c4c9bf0358f2a6056c1cef30a7ec1c31bf713dfcbb2b55c273f69e4b2e077b46851e054e5d7b6489b3d0ec33e5fff1da10786a6f900fcebd6dbda0fddea43973a1a45033e1720f3aa5cd119bfa816a331a029bda36f1718f31753a458035d5bcc0f29cee093653966fc9c408234631e1b3375fdfee6624805a1262bfe65135209a88439b6408d2df8b57e8d855f41975278cda888b9ca07b8a0b7a849f5a108ebecd95db02d274ecf313913e36550a3c74a6e44ba9aaadfa9103e441465f11fcb0f93bed12b0edcde6e7320c4e8d0f590aaba3a0e4dd063e84c9328cefbdca67040032f05525c38334cdcd25dbf15b8338c9d79c2e6196edadacf31aa634610bce12e54f12548cfba23c5d46b8be1ede0905be6bc3b12b0c2eca4f0d7281d3686c16c8a982fc5d4c78678622bfda965c69caa491bbfb840fe70f431f7693c3cb03958ec45fb87b9c95b768ee8021af743cceba83b91a081efd20cc99c07df5be29ecfeeaf7e9e663533ffc7dcaddee3542f58860fb082f164344c79fdb3385dede0dfe01b56c8d2444735e7d72774628f94776247fe2a31f5b410cdd526f8e5f8734b48a7c95f676ca61976522c19167c65d737528b54943dafa593df29d6d5d927d9a404ade15d14e889675da5f1c0c9f18483a4f5aab96c099e8516b1cd3fca4c8ccf894f3965ecaa9b342d42c74f7013fff48da8f89af7f64abad8770c5a9ec09a169bd0b8a67be00218bc8478f1ede47aef880bae73da72c7bef9151283109daccbd3e3be24d6a91706c98338a7010b05a50479ff74694c066c3d35681537c76ebc5c9fb65870664018bb2c85198444575af8d3a1f53be88c9a355ff17743debc213865f1f742bec617485ecafa52f67d9ba065dbc5a69f17b1a85461463535833e5ec6f81e2e72f78ad9fdd1d9647486d9e117429fae1f5713d21abeaf7cd497b67a68f2d48dc7cecf75ecc92a862130efb8bee2537fbf4a717aaf87e526a634b8cbb7c4ba90d9f028c74247f2094f24d78a66f5e6ff3b1388cd70f8fa694d2b3bc43223a36eeb9723e4584820b897f414885357f206a353e429ce4bb33c4a70af21b5f7c7cc300a2e1f281bd4a40c0555b145af61b7b924167eada4430081a34c1a96e78de14e928ca7c90aa32ecad7bb19a446a7716ad1e601a52aa8e8043a0af861b133c1461e632c53ed9ba2d44031a3760e91323f98eb7b023d42fbb399488040a25b1800bcf825164cd2089fc4785c4a16b3e4e7af9e40659451bcbf8016cb6539a24c1e0243af51b928e3df7e9efd1706f78e23a3eff315398113bd60cbd468d00bfa24ad3f15ec12017b687dd2471be9e1a79a906bd75447acc85610e06d562517867e87271e5893dc147e2c44684da829efdd53eedc00a034d2e82f402d52393a2e3423eaaf41d3878ee0b07239ee6418587fb86c4adc3d419303e09bdee8bbc3991f1aa51042e5c8191481c33b7549347772c4e958f6fef5fc7db00a0293a3c449402182bc6f6e6d3584054842c550549780d3a83d7408d4efba99610b520932510c9eff28c9f59abbe7f8c8b3f0fca8290c00f7db39ae8b5c3cebdc015b1c89713458546ff4f32a2776a221542fb47dcde0bfb50d389a5d6fb56a985c1b6fec5cfced7921780d955cc164858fcbdaa3ee528a40781767f0f0519bdb3eb46f775ece3b5f1c792fbec66b17599f755d0bf387bee39e076455e03789b53838122ca06db1d8c9a24f9aa246f1b045481ccbb79e302f7b809fc81198bc8b0a616cd79be7672cecadda05a858c2105770f1e7598548f5056df1505c25972adb2bc2f2df264e2d591307c463c4f3985ac03b3b83e390945497280b6e4dcc4d7aff30da0e689a8c2ca0e8074421543a71f87aa2ff5dc8eef3b469d8bb60c0c97b6569be3f2ea3b8018595c06ce4cf22b562450fd6a4f0c7ce747c32e52c971a7daab8c9d9333b2020f70d529762929d21b0bdd342964bd6021438f3accac2bdb83cbc96cc606c667f18dbc8284770833da2c2e0562ee2ef1e4b20f59a97cc5ce741fe9ce90db6b79466b309c530833e514c46a1b7f6b9b76159bb2a725fb4989a41d1760cb07fe4faebd96df5a4b0e6004eecf7134f0bf13e5df40b59235cbc167fea69e9b9e1df8035a982a89036baa21158fafa3fd75b42252feec209249679287beb0c07c45de2176f6cb8d9f8de45c40d698c70912682a0c0d01a73a460ef7fd8c1b90a0aafede8743d8a9a91349a23281fb76156768cccd4bbf07461828caa32a8d722487730c63bf7b96bd2f9b8df7dc13ef79bed953fc728c44c80ae0b7026de2ff04a010ab33c964667f0d28fc7df303b9e1c93171eec0ad0486c9430c57406146418074570816d78b1130483089154169f08aadb87eccb83c1a87bd646d514edf42d0bb814e6dcdd9360804de3ea28a8ea0491f042f10f46b00c849a6ed5b8d60f4a29ac5484e2a0158109c74ebf9f56cb668c1c944849225f3d0c01703b49f301c82c694bf351cdbea8ec88f122d9bc74f95af7e72699d4436c756f1189b6c9369ff3d471e4f659da62c30cd6346f72cbea6364466d4fa4428f311758f1add63d495ac8d13a62160b24eaa90c4a9060ea3a86308cb086d547269c9506fac4071f8e422467d17d14b285b8f27e928c2d1f174ee52117981d5095ad257bd15de78d25f4019c032aedb7e5da6f47aba9c2bf859e9933bfaae312b46ad2c0a1ed98d52a48330026312b2582de8caa677464dd520bbbae483ccd387b8e69ecc7d083b9580a2f704859af52e45dde1c56acb9ddbcfb7f3546cb0974adde2a05acc45be30a2588fe958972d94e2e355742184f21e54c3de44830ad63d23a4584e48bffc331e5a4f85d709093e37aafc4509277d5f0e7778a408ee8991a8f2d868e0ce7722b8ec0aaf1ebca5782bec1b6b340ac82ee014c8f9b56560e72fd05de4c401ff2b0e44f3eb462f45428907f044f04fde22e87b8bcdd948573c83b6a9475344a41cababbd90f58170c02c8aeee01f403de7ad068545594873849fee16e699f93f27cf965548ed071152edb7233e55dcd78b3a795c16c1d9d9218d459480865b3cd6f72860d70494575474e8dfae0594fee4cb71508bb17a68ca70f88bf533e97ac5583d2f7a601a8a032346de7ad05c71ea7ed49f7990da53001f0ce04fa859c03dfc6afbbcc8d32f9473da50a36e76278772243750865d1de6d7ef3aa5e577d68292abdbf52c0e2c0685642d6d8fa2b086d0d6d91c4e032390fb9c185d83e87a5e1a9fc5d671d214919687318ae36f6eb041bd0b1ba389cd6dc1d2c976e8a4ff7ac9a55d1723c6cd817394bc47da30c867fcc799787d7c231612a00bb4d4206c60e98d3ab0daa522e5f502d8c6e32a8449cc1a2e273e49c838172da37a5ca2ba3d14f424d4baf6ee9fc56d415dddc6a7e56e140d3a332120146463363e0bc9b16d37c79d0248329c27cc2e1a4d86950ed539fff379346906b12dd5587bfe778de31711ee785d0ca2b459a8d1b4b815daefa3aa4e98fc3513d4e58af3e449592ec13a8894c2186c58b0a70377aadbc4522a278fa6e66af9fe6641afd47f8cebd8dc1aa226aa7338a53bcfa295b1ec234cf73e4d906fc1ff95d4ed2420aa75bb483129d7db6eb74331797eed51831911b43a160df43297192ce27446e1fdc0a1a00108c1a653b2c11ea0511756fb0beab3544ea7e9e011fa03f125dbd2f4f7d663e6c24c5d608186ba5ac11ee514dc518f6ae86231439f6446dbd8dd7bb9855a4d4d25c6c94cd3d3c1f4142288e77524d19a41ededda4a1bde1e701352156fdcf1a63a51ff53698873a91c64a8368de9eca9e8b385664aaf6f2fde75657d822ab1aa80f790f90aa529234c0cb567cc3c6f3af9ac6737b0d0914292609f7bbdf74daa8608f33b901d98019c08b949b120e4694a96af66abf18de6063b840e06189b49529866ab8ab25e735f115dda048bd0a44d7b3de814dc0326345b97c99b56f8a5346dc7f07a4c02c92bbbaf0106e7a5b705b9417c390a4340865f2d09ece95fb0a501cabd05b6ada0bcd4ea4073f839123540222ca0c0b7f69f9bbd3c72d26d45f01aad15fe3df09955534962a7b85d34bd9b58ab73b517a5e6e96c78fd56af99faae38a325a405dd530a586f28f41a8f0a20e26cd6a14193c6eda9718c749f9b3faf0511a107ad41b32c6b3c463834ee7dc3da7ccf8c9e965918297c66ea4ac6272374601b7d855422a74c489806647dc4bf1ecf42c2ed3040ef87020a7669842f1e71223eaf7056afe3ce6d4265dcabbe9333365cc021fc64c246b513728e1c20e798e79938195a0410891a9304fdd5494601ab1481737c48a79d4c51926ef7c63be39ae4c7805cdf0", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}, {0x0, 0x0, 0xd8c}, {&(0x7f0000003200), 0x0, 0x6}, {&(0x7f0000003280), 0x0, 0x800}]) 01:51:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x8914, &(0x7f0000000180)) 01:51:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x0, 0x0, 0x0, 0x0, 0x394, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 372.782664][T11058] loop4: detected capacity change from 0 to 264192 01:51:20 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) 01:51:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580), &(0x7f00000015c0), 0x2, 0x0) 01:51:20 executing program 3: io_setup(0x12f5, &(0x7f00000000c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000180), 0x8}) 01:51:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:51:20 executing program 4: syz_read_part_table(0x9, 0x7, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}, {0x0, 0x0, 0xd8c}, {&(0x7f0000003200), 0x0, 0x6}, {&(0x7f0000003280), 0x0, 0x800}]) 01:51:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) 01:51:21 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) 01:51:21 executing program 1: socket$inet6(0x18, 0x3, 0x1) 01:51:21 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x4}], 0x1, 0x0) r1 = dup(r0) r2 = socket(0x2, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0) [ 373.426147][T11067] loop4: detected capacity change from 0 to 264192 01:51:21 executing program 3: io_setup(0x12f5, &(0x7f00000000c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000180), 0x8}) 01:51:21 executing program 4: syz_read_part_table(0x9, 0x7, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}, {0x0, 0x0, 0xd8c}, {&(0x7f0000003200), 0x0, 0x6}, {&(0x7f0000003280), 0x0, 0x800}]) 01:51:21 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), &(0x7f0000000080)=0x10) 01:51:21 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) 01:51:21 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) [ 373.710594][T11085] loop4: detected capacity change from 0 to 264192 01:51:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:51:21 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @val, {@ipv4}}, 0x0) 01:51:21 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r1) write(r2, &(0x7f0000000100), 0xfffffe5d) write(r2, 0x0, 0x0) 01:51:21 executing program 5: open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) 01:51:21 executing program 3: r0 = semget(0x3, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) 01:51:21 executing program 4: syz_read_part_table(0x0, 0x7, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}, {0x0, 0x0, 0xd8c}, {&(0x7f0000003200), 0x0, 0x6}, {&(0x7f0000003280), 0x0, 0x800}]) 01:51:21 executing program 3: select(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)) 01:51:21 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000000780), 0x48) 01:51:21 executing program 5: syz_mount_image$ufs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001580)=[{&(0x7f0000000140)="13", 0x1}, {&(0x7f0000001140)='\r', 0x1}], 0x0, 0x0) [ 374.321185][T11098] loop4: detected capacity change from 0 to 264192 01:51:21 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 01:51:22 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/67, 0x43) 01:51:22 executing program 1: io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) 01:51:22 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 01:51:22 executing program 5: process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 01:51:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:51:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3000330050dd6800080211000001080211000000505050"], 0x4c}}, 0x0) 01:51:22 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:22 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:22 executing program 3: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:22 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) [ 375.243019][T11126] FAT-fs (loop1): bogus number of reserved sectors 01:51:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 375.308909][T11126] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:22 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:22 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:23 executing program 4: syz_read_part_table(0x0, 0x6, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}, {0x0, 0x0, 0xd8c}, {&(0x7f0000003200), 0x0, 0x6}]) 01:51:23 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 375.461111][T11144] FAT-fs (loop1): bogus number of reserved sectors [ 375.492875][T11144] FAT-fs (loop1): Can't find a valid FAT filesystem [ 375.583414][T11148] loop4: detected capacity change from 0 to 264192 01:51:23 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:23 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:23 executing program 4: syz_read_part_table(0x0, 0x5, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d0238a351cdd48941d010b8ea66d811f3123a777ef5c4c9bf0358f2a6056c1cef30a7ec1c31bf713dfcbb2b55c273f69e4b2e077b46851e054e5d7b6489b3d0ec33e5fff1da10786a6f900fcebd6dbda0fddea43973a1a45033e1720f3aa5cd119bfa816a331a029bda36f1718f31753a458035d5bcc0f29cee093653966fc9c408234631e1b3375fdfee6624805a1262bfe65135209a88439b6408d2df8b57e8d855f41975278cda888b9ca07b8a0b7a849f5a108ebecd95db02d274ecf313913e36550a3c74a6e44ba9aaadfa9103e441465f11fcb0f93bed12b0edcde6e7320c4e8d0f590aaba3a0e4dd063e84c9328cefbdca67040032f05525c38334cdcd25dbf15b8338c9d79c2e6196edadacf31aa634610bce12e54f12548cfba23c5d46b8be1ede0905be6bc3b12b0c2eca4f0d7281d3686c16c8a982fc5d4c78678622bfda965c69caa491bbfb840fe70f431f7693c3cb03958ec45fb87b9c95b768ee8021af743cceba83b91a081efd20cc99c07df5be29ecfeeaf7e9e663533ffc7dcaddee3542f58860fb082f164344c79fdb3385dede0dfe01b56c8d2444735e7d72774628f94776247fe2a31f5b410cdd526f8e5f8734b48a7c95f676ca61976522c19167c65d737528b54943dafa593df29d6d5d927d9a404ade15d14e889675da5f1c0c9f18483a4f5aab96c099e8516b1cd3fca4c8ccf894f3965ecaa9b342d42c74f7013fff48da8f89af7f64abad8770c5a9ec09a169bd0b8a67be00218bc8478f1ede47aef880bae73da72c7bef9151283109daccbd3e3be24d6a91706c98338a7010b05a50479ff74694c066c3d35681537c76ebc5c9fb65870664018bb2c85198444575af8d3a1f53be88c9a355ff17743debc213865f1f742bec617485ecafa52f67d9ba065dbc5a69f17b1a85461463535833e5ec6f81e2e72f78ad9fdd1d9647486d9e117429fae1f5713d21abeaf7cd497b67a68f2d48dc7cecf75ecc92a862130efb8bee2537fbf4a717aaf87e526a634b8cbb7c4ba90d9f028c74247f2094f24d78a66f5e6ff3b1388cd70f8fa694d2b3bc43223a36eeb9723e4584820b897f414885357f206a353e429ce4bb33c4a70af21b5f7c7cc300a2e1f281bd4a40c0555b145af61b7b924167eada4430081a34c1a96e78de14e928ca7c90aa32ecad7bb19a446a7716ad1e601a52aa8e8043a0af861b133c1461e632c53ed9ba2d44031a3760e91323f98eb7b023d42fbb399488040a25b1800bcf825164cd2089fc4785c4a16b3e4e7af9e40659451bcbf8016cb6539a24c1e0243af51b928e3df7e9efd1706f78e23a3eff315398113bd60cbd468d00bfa24ad3f15ec12017b687dd2471be9e1a79a906bd75447acc85610e06d562517867e87271e5893dc147e2c44684da829efdd53eedc00a034d2e82f402d52393a2e3423eaaf41d3878ee0b07239ee6418587fb86c4adc3d419303e09bdee8bbc3991f1aa51042e5c8191481c33b7549347772c4e958f6fef5fc7db00a0293a3c449402182bc6f6e6d3584054842c550549780d3a83d7408d4efba99610b520932510c9eff28c9f59abbe7f8c8b3f0fca8290c00f7db39ae8b5c3cebdc015b1c89713458546ff4f32a2776a221542fb47dcde0bfb50d389a5d6fb56a985c1b6fec5cfced7921780d955cc164858fcbdaa3ee528a40781767f0f0519bdb3eb46f775ece3b5f1c792fbec66b17599f755d0bf387bee39e076455e03789b53838122ca06db1d8c9a24f9aa246f1b045481ccbb79e302f7b809fc81198bc8b0a616cd79be7672cecadda05a858c2105770f1e7598548f5056df1505c25972adb2bc2f2df264e2d591307c463c4f3985ac03b3b83e390945497280b6e4dcc4d7aff30da0e689a8c2ca0e8074421543a71f87aa2ff5dc8eef3b469d8bb60c0c97b6569be3f2ea3b8018595c06ce4cf22b562450fd6a4f0c7ce747c32e52c971a7daab8c9d9333b2020f70d529762929d21b0bdd342964bd6021438f3accac2bdb83cbc96cc606c667f18dbc8284770833da2c2e0562ee2ef1e4b20f59a97cc5ce741fe9ce90db6b79466b309c530833e514c46a1b7f6b9b76159bb2a725fb4989a41d1760cb07fe4faebd96df5a4b0e6004eecf7134f0bf13e5df40b59235cbc167fea69e9b9e1df8035a982a89036baa21158fafa3fd75b42252feec209249679287beb0c07c45de2176f6cb8d9f8de45c40d698c70912682a0c0d01a73a460ef7fd8c1b90a0aafede8743d8a9a91349a23281fb76156768cccd4bbf07461828caa32a8d722487730c63bf7b96bd2f9b8df7dc13ef79bed953fc728c44c80ae0b7026de2ff04a010ab33c964667f0d28fc7df303b9e1c93171eec0ad0486c9430c57406146418074570816d78b1130483089154169f08aadb87eccb83c1a87bd646d514edf42d0bb814e6dcdd9360804de3ea28a8ea0491f042f10f46b00c849a6ed5b8d60f4a29ac5484e2a0158109c74ebf9f56cb668c1c944849225f3d0c01703b49f301c82c694bf351cdbea8ec88f122d9bc74f95af7e72699d4436c756f1189b6c9369ff3d471e4f659da62c30cd6346f72cbea6364466d4fa4428f311758f1add63d495ac8d13a62160b24eaa90c4a9060ea3a86308cb086d547269c9506fac4071f8e422467d17d14b285b8f27e928c2d1f174ee52117981d5095ad257bd15de78d25f4019c032aedb7e5da6f47aba9c2bf859e9933bfaae312b46ad2c0a1ed98d52a48330026312b2582de8caa677464dd520bbbae483ccd387b8e69ecc7d083b9580a2f704859af52e45dde1c56acb9ddbcfb7f3546cb0974adde2a05acc45be30a2588fe958972d94e2e355742184f21e54c3de44830ad63d23a4584e48bffc331e5a4f85d709093e37aafc4509277d5f0e7778a408ee8991a8f2d868e0ce7722b8ec0aaf1ebca5782bec1b6b340ac82ee014c8f9b56560e72fd05de4c401ff2b0e44f3eb462f45428907f044f04fde22e87b8bcdd948573c83b6a9475344a41cababbd90f58170c02c8aeee01f403de7ad068545594873849fee16e699f93f27cf965548ed071152edb7233e55dcd78b3a795c16c1d9d9218d459480865b3cd6f72860d70494575474e8dfae0594fee4cb71508bb17a68ca70f88bf533e97ac5583d2f7a601a8a032346de7ad05c71ea7ed49f7990da53001f0ce04fa859c03dfc6afbbcc8d32f9473da50a36e76278772243750865d1de6d7ef3aa5e577d68292abdbf52c0e2c0685642d6d8fa2b086d0d6d91c4e032390fb9c185d83e87a5e1a9fc5d671d214919687318ae36f6eb041bd0b1ba389cd6dc1d2c976e8a4ff7ac9a55d1723c6cd817394bc47da30c867fcc799787d7c231612a00bb4d4206c60e98d3ab0daa522e5f502d8c6e32a8449cc1a2e273e49c838172da37a5ca2ba3d14f424d4baf6ee9fc56d415dddc6a7e56e140d3a332120146463363e0bc9b16d37c79d0248329c27cc2e1a4d86950ed539fff379346906b12dd5587bfe778de31711ee785d0ca2b459a8d1b4b815daefa3aa4e98fc3513d4e58af3e449592ec13a8894c2186c58b0a70377aadbc4522a278fa6e66af9fe6641afd47f8cebd8dc1aa226aa7338a53bcfa295b1ec234cf73e4d906fc1ff95d4ed2420aa75bb483129d7db6eb74331797eed51831911b43a160df43297192ce27446e1fdc0a1a00108c1a653b2c11ea0511756fb0beab3544ea7e9e011fa03f125dbd2f4f7d663e6c24c5d608186ba5ac11ee514dc518f6ae86231439f6446dbd8dd7bb9855a4d4d25c6c94cd3d3c1f4142288e77524d19a41ededda4a1bde1e701352156fdcf1a63a51ff53698873a91c64a8368de9eca9e8b385664aaf6f2fde75657d822ab1aa80f790f90aa529234c0cb567cc3c6f3af9ac6737b0d0914292609f7bbdf74daa8608f33b901d98019c08b949b120e4694a96af66abf18de6063b840e06189b49529866ab8ab25e735f115dda048bd0a44d7b3de814dc0326345b97c99b56f8a5346dc7f07a4c02c92bbbaf0106e7a5b705b9417c390a4340865f2d09ece95fb0a501cabd05b6ada0bcd4ea4073f839123540222ca0c0b7f69f9bbd3c72d26d45f01aad15fe3df09955534962a7b85d34bd9b58ab73b517a5e6e96c78fd56af99faae38a325a405dd530a586f28f41a8f0a20e26cd6a14193c6eda9718c749f9b3faf0511a107ad41b32c6b3c463834ee7dc3da7ccf8c9e965918297c66ea4ac6272374601b7d855422a74c489806647dc4bf1ecf42c2ed3040ef87020a7669842f1e71223eaf7056afe3ce6d4265dcabbe9333365cc021fc64c246b513728e1c20e798e79938195a0410891a9304fdd5494601ab1481737c48a79d4c51926ef7c63be39ae4c7805cdf0", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}, {0x0, 0x0, 0xd8c}]) 01:51:23 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 376.091844][T11156] loop4: detected capacity change from 0 to 264192 [ 376.098444][T11159] FAT-fs (loop1): bogus number of reserved sectors [ 376.098465][T11159] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:23 executing program 3: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:23 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:51:23 executing program 4: syz_read_part_table(0x0, 0x4, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d0238a351cdd48941d010b8ea66d811f3123a777ef5c4c9bf0358f2a6056c1cef30a7ec1c31bf713dfcbb2b55c273f69e4b2e077b46851e054e5d7b6489b3d0ec33e5fff1da10786a6f900fcebd6dbda0fddea43973a1a45033e1720f3aa5cd119bfa816a331a029bda36f1718f31753a458035d5bcc0f29cee093653966fc9c408234631e1b3375fdfee6624805a1262bfe65135209a88439b6408d2df8b57e8d855f41975278cda888b9ca07b8a0b7a849f5a108ebecd95db02d274ecf313913e36550a3c74a6e44ba9aaadfa9103e441465f11fcb0f93bed12b0edcde6e7320c4e8d0f590aaba3a0e4dd063e84c9328cefbdca67040032f05525c38334cdcd25dbf15b8338c9d79c2e6196edadacf31aa634610bce12e54f12548cfba23c5d46b8be1ede0905be6bc3b12b0c2eca4f0d7281d3686c16c8a982fc5d4c78678622bfda965c69caa491bbfb840fe70f431f7693c3cb03958ec45fb87b9c95b768ee8021af743cceba83b91a081efd20cc99c07df5be29ecfeeaf7e9e663533ffc7dcaddee3542f58860fb082f164344c79fdb3385dede0dfe01b56c8d2444735e7d72774628f94776247fe2a31f5b410cdd526f8e5f8734b48a7c95f676ca61976522c19167c65d737528b54943dafa593df29d6d5d927d9a404ade15d14e889675da5f1c0c9f18483a4f5aab96c099e8516b1cd3fca4c8ccf894f3965ecaa9b342d42c74f7013fff48da8f89af7f64abad8770c5a9ec09a169bd0b8a67be00218bc8478f1ede47aef880bae73da72c7bef9151283109daccbd3e3be24d6a91706c98338a7010b05a50479ff74694c066c3d35681537c76ebc5c9fb65870664018bb2c85198444575af8d3a1f53be88c9a355ff17743debc213865f1f742bec617485ecafa52f67d9ba065dbc5a69f17b1a85461463535833e5ec6f81e2e72f78ad9fdd1d9647486d9e117429fae1f5713d21abeaf7cd497b67a68f2d48dc7cecf75ecc92a862130efb8bee2537fbf4a717aaf87e526a634b8cbb7c4ba90d9f028c74247f2094f24d78a66f5e6ff3b1388cd70f8fa694d2b3bc43223a36eeb9723e4584820b897f414885357f206a353e429ce4bb33c4a70af21b5f7c7cc300a2e1f281bd4a40c0555b145af61b7b924167eada4430081a34c1a96e78de14e928ca7c90aa32ecad7bb19a446a7716ad1e601a52aa8e8043a0af861b133c1461e632c53ed9ba2d44031a3760e91323f98eb7b023d42fbb399488040a25b1800bcf825164cd2089fc4785c4a16b3e4e7af9e40659451bcbf8016cb6539a24c1e0243af51b928e3df7e9efd1706f78e23a3eff315398113bd60cbd468d00bfa24ad3f15ec12017b687dd2471be9e1a79a906bd75447acc85610e06d562517867e87271e5893dc147e2c44684da829efdd53eedc00a034d2e82f402d52393a2e3423eaaf41d3878ee0b07239ee6418587fb86c4adc3d419303e09bdee8bbc3991f1aa51042e5c8191481c33b7549347772c4e958f6fef5fc7db00a0293a3c449402182bc6f6e6d3584054842c550549780d3a83d7408d4efba99610b520932510c9eff28c9f59abbe7f8c8b3f0fca8290c00f7db39ae8b5c3cebdc015b1c89713458546ff4f32a2776a221542fb47dcde0bfb50d389a5d6fb56a985c1b6fec5cfced7921780d955cc164858fcbdaa3ee528a40781767f0f0519bdb3eb46f775ece3b5f1c792fbec66b17599f755d0bf387bee39e076455e03789b53838122ca06db1d8c9a24f9aa246f1b045481ccbb79e302f7b809fc81198bc8b0a616cd79be7672cecadda05a858c2105770f1e7598548f5056df1505c25972adb2bc2f2df264e2d591307c463c4f3985ac03b3b83e390945497280b6e4dcc4d7aff30da0e689a8c2ca0e8074421543a71f87aa2ff5dc8eef3b469d8bb60c0c97b6569be3f2ea3b8018595c06ce4cf22b562450fd6a4f0c7ce747c32e52c971a7daab8c9d9333b2020f70d529762929d21b0bdd342964bd6021438f3accac2bdb83cbc96cc606c667f18dbc8284770833da2c2e0562ee2ef1e4b20f59a97cc5ce741fe9ce90db6b79466b309c530833e514c46a1b7f6b9b76159bb2a725fb4989a41d1760cb07fe4faebd96df5a4b0e6004eecf7134f0bf13e5df40b59235cbc167fea69e9b9e1df8035a982a89036baa21158fafa3fd75b42252feec209249679287beb0c07c45de2176f6cb8d9f8de45c40d698c70912682a0c0d01a73a460ef7fd8c1b90a0aafede8743d8a9a91349a23281fb76156768cccd4bbf07461828caa32a8d722487730c63bf7b96bd2f9b8df7dc13ef79bed953fc728c44c80ae0b7026de2ff04a010ab33c964667f0d28fc7df303b9e1c93171eec0ad0486c9430c57406146418074570816d78b1130483089154169f08aadb87eccb83c1a87bd646d514edf42d0bb814e6dcdd9360804de3ea28a8ea0491f042f10f46b00c849a6ed5b8d60f4a29ac5484e2a0158109c74ebf9f56cb668c1c944849225f3d0c01703b49f301c82c694bf351cdbea8ec88f122d9bc74f95af7e72699d4436c756f1189b6c9369ff3d471e4f659da62c30cd6346f72cbea6364466d4fa4428f311758f1add63d495ac8d13a62160b24eaa90c4a9060ea3a86308cb086d547269c9506fac4071f8e422467d17d14b285b8f27e928c2d1f174ee52117981d5095ad257bd15de78d25f4019c032aedb7e5da6f47aba9c2bf859e9933bfaae312b46ad2c0a1ed98d52a48330026312b2582de8caa677464dd520bbbae483ccd387b8e69ecc7d083b9580a2f704859af52e45dde1c56acb9ddbcfb7f3546cb0974adde2a05acc45be30a2588fe958972d94e2e355742184f21e54c3de44830ad63d23a4584e48bffc331e5a4f85d709093e37aafc4509277d5f0e7778a408ee8991a8f2d868e0ce7722b8ec0aaf1ebca5782bec1b6b340ac82ee014c8f9b56560e72fd05de4c401ff2b0e44f3eb462f45428907f044f04fde22e87b8bcdd948573c83b6a9475344a41cababbd90f58170c02c8aeee01f403de7ad068545594873849fee16e699f93f27cf965548ed071152edb7233e55dcd78b3a795c16c1d9d9218d459480865b3cd6f72860d70494575474e8dfae0594fee4cb71508bb17a68ca70f88bf533e97ac5583d2f7a601a8a032346de7ad05c71ea7ed49f7990da53001f0ce04fa859c03dfc6afbbcc8d32f9473da50a36e76278772243750865d1de6d7ef3aa5e577d68292abdbf52c0e2c0685642d6d8fa2b086d0d6d91c4e032390fb9c185d83e87a5e1a9fc5d671d214919687318ae36f6eb041bd0b1ba389cd6dc1d2c976e8a4ff7ac9a55d1723c6cd817394bc47da30c867fcc799787d7c231612a00bb4d4206c60e98d3ab0daa522e5f502d8c6e32a8449cc1a2e273e49c838172da37a5ca2ba3d14f424d4baf6ee9fc56d415dddc6a7e56e140d3a332120146463363e0bc9b16d37c79d0248329c27cc2e1a4d86950ed539fff379346906b12dd5587bfe778de31711ee785d0ca2b459a8d1b4b815daefa3aa4e98fc3513d4e58af3e449592ec13a8894c2186c58b0a70377aadbc4522a278fa6e66af9fe6641afd47f8cebd8dc1aa226aa7338a53bcfa295b1ec234cf73e4d906fc1ff95d4ed2420aa75bb483129d7db6eb74331797eed51831911b43a160df43297192ce27446e1fdc0a1a00108c1a653b2c11ea0511756fb0beab3544ea7e9e011fa03f125dbd2f4f7d663e6c24c5d608186ba5ac11ee514dc518f6ae86231439f6446dbd8dd7bb9855a4d4d25c6c94cd3d3c1f4142288e77524d19a41ededda4a1bde1e701352156fdcf1a63a51ff53698873a91c64a8368de9eca9e8b385664aaf6f2fde75657d822ab1aa80f790f90aa529234c0cb567cc3c6f3af9ac6737b0d0914292609f7bbdf74daa8608f33b901d98019c08b949b120e4694a96af66abf18de6063b840e06189b49529866ab8ab25e735f115dda048bd0a44d7b3de814dc0326345b97c99b56f8a5346dc7f07a4c02c92bbbaf0106e7a5b705b9417c390a4340865f2d09ece95fb0a501cabd05b6ada0bcd4ea4073f839123540222ca0c0b7f69f9bbd3c72d26d45f01aad15fe3df09955534962a7b85d34bd9b58ab73b517a5e6e96c78fd56af99faae38a325a405dd530a586f28f41a8f0a20e26cd6a14193c6eda9718c749f9b3faf0511a107ad41b32c6b3c463834ee7dc3da7ccf8c9e965918297c66ea4ac6272374601b7d855422a74c489806647dc4bf1ecf42c2ed3040ef87020a7669842f1e71223eaf7056afe3ce6d4265dcabbe9333365cc021fc64c246b513728e1c20e798e79938195a0410891a9304fdd5494601ab1481737c48a79d4c51926ef7c63be39ae4c7805cdf0", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}, {0x0}]) 01:51:23 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:51:23 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) [ 376.331979][T11174] loop4: detected capacity change from 0 to 264192 01:51:23 executing program 4: syz_read_part_table(0x0, 0x3, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}]) 01:51:24 executing program 4: syz_read_part_table(0x0, 0x3, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}, {&(0x7f0000002000)="f4d7e05af001029dfd2450c67055fa253dbdcba068bcbb43413d8df7fd", 0x1d}]) 01:51:24 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:24 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) [ 376.549073][T11185] loop4: detected capacity change from 0 to 264192 01:51:24 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0xdfe}]) [ 376.736761][T11189] loop4: detected capacity change from 0 to 264192 01:51:24 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:24 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request}}}}}, 0x0) 01:51:24 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:24 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:51:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:51:24 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) [ 377.122717][T11194] loop4: detected capacity change from 0 to 264192 01:51:24 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:51:24 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:24 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:51:24 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:51:24 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:24 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 377.351277][T11210] loop4: detected capacity change from 0 to 264192 [ 377.463546][ T4096] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:51:25 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:25 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:25 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:51:25 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 377.888765][T11223] loop4: detected capacity change from 0 to 264192 01:51:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:51:25 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@rodir}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:25 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) 01:51:25 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) 01:51:25 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) 01:51:25 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) 01:51:25 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) [ 378.126645][T11238] loop4: detected capacity change from 0 to 264192 01:51:25 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) [ 378.233876][ T4096] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 378.308232][T11244] loop4: detected capacity change from 0 to 264192 [ 378.378382][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.384748][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 01:51:26 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:26 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) 01:51:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:51:26 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 378.771730][T11249] loop4: detected capacity change from 0 to 264192 01:51:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:26 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:51:26 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:26 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:26 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) ioctl$TCXONC(r3, 0x540a, 0x1) [ 378.950524][T11257] loop4: detected capacity change from 0 to 264192 01:51:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:51:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x6ff}]) 01:51:26 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:26 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x6ff}]) [ 379.103464][T11266] FAT-fs (loop1): bogus number of reserved sectors [ 379.134215][T11266] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:26 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) [ 379.241325][T11275] loop4: detected capacity change from 0 to 264192 [ 379.292199][T11278] FAT-fs (loop1): bogus number of reserved sectors [ 379.365894][T11278] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:27 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:51:27 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:51:27 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@rodir}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) 01:51:27 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:27 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/full\x00'}}]}) [ 379.859189][T11284] FAT-fs (loop1): bogus number of reserved sectors [ 379.859603][T11286] loop4: detected capacity change from 0 to 264192 [ 379.890877][T11284] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:27 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:51:27 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:27 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@utf8no}]}) [ 380.035638][T11293] FAT-fs (loop1): bogus number of reserved sectors [ 380.051156][T11293] FAT-fs (loop1): Can't find a valid FAT filesystem [ 380.100405][T11295] loop4: detected capacity change from 0 to 264192 01:51:27 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) [ 380.141894][T11299] FAT-fs (loop1): bogus number of reserved sectors [ 380.169165][T11299] FAT-fs (loop1): Can't find a valid FAT filesystem 01:51:27 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x380}]) 01:51:27 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@utf8no}]}) [ 380.294690][T11304] FAT-fs (loop1): bogus number of reserved sectors [ 380.301245][T11304] FAT-fs (loop1): Can't find a valid FAT filesystem [ 380.348079][T11306] loop4: detected capacity change from 0 to 264192 01:51:28 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 01:51:28 executing program 1: syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@utf8no}]}) 01:51:28 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0", 0x1}]) [ 380.513303][T11308] FAT-fs (loop1): bogus number of reserved sectors [ 380.540133][T11308] FAT-fs (loop1): Can't find a valid FAT filesystem [ 380.555035][T11310] loop4: detected capacity change from 0 to 264192 01:51:28 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:28 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0", 0x1}]) 01:51:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 380.796892][T11318] loop4: detected capacity change from 0 to 264192 [ 380.803335][ T3676] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 380.814941][T11317] loop1: detected capacity change from 0 to 264192 [ 380.847317][T11317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. 01:51:28 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:28 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0", 0x1}]) 01:51:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 380.998314][T11328] loop4: detected capacity change from 0 to 264192 [ 381.043377][ T3676] usb 4-1: Using ep0 maxpacket: 8 01:51:28 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c1}]) [ 381.096314][T11331] loop1: detected capacity change from 0 to 264192 01:51:28 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c1}]) [ 381.146063][T11331] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 381.163627][ T3676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.178103][T11331] EXT4-fs (loop1): group descriptors corrupted! [ 381.188167][ T3676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 381.220977][T11335] loop4: detected capacity change from 0 to 264192 [ 381.234820][ T3676] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.261224][ T3676] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.276569][ T3676] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.287915][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.311490][ T3676] usb 4-1: config 0 descriptor?? [ 381.593866][ T3676] usb 4-1: GET_CAPABILITIES returned 0 [ 381.599410][ T3676] usbtmc 4-1:0.0: can't read capabilities [ 381.810532][ T3676] usb 4-1: USB disconnect, device number 7 01:51:29 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c1}]) 01:51:29 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:51:29 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:29 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) [ 382.363834][T11342] loop4: detected capacity change from 0 to 264192 [ 382.363992][T11343] loop1: detected capacity change from 0 to 264192 01:51:29 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x0, 0xb38f, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:51:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 382.413493][T11343] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:51:30 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x2a1}]) 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 382.513371][T11343] EXT4-fs (loop1): group descriptors corrupted! 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) [ 382.623134][T11356] loop4: detected capacity change from 0 to 264192 01:51:30 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c2}]) 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='+', &(0x7f00000000c0)=@udp6}, 0x20) 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 382.820645][T11364] loop4: detected capacity change from 0 to 264192 01:51:30 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:30 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cf", 0x1c2}]) 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 383.203623][T11373] loop4: detected capacity change from 0 to 264192 01:51:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) 01:51:30 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:30 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c2}]) 01:51:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 383.384649][T11382] loop4: detected capacity change from 0 to 264192 01:51:31 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x232}]) 01:51:31 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:31 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f0002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 383.590869][T11391] loop4: detected capacity change from 0 to 264192 [ 383.853243][ T3675] usb 4-1: new high-speed USB device number 8 using dummy_hcd 01:51:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:31 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:31 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c3}]) 01:51:31 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:31 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) [ 384.096779][T11400] loop4: detected capacity change from 0 to 264192 [ 384.123533][ T3675] usb 4-1: Using ep0 maxpacket: 8 01:51:31 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c3}]) [ 384.253541][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.270637][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.291828][T11411] loop4: detected capacity change from 0 to 264192 01:51:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:31 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:31 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 384.321604][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 384.381857][ T3675] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.407011][ T3675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.449081][ T3675] usb 4-1: config 0 descriptor?? [ 384.508389][ T3675] usbtmc 4-1:0.0: bulk endpoints not found 01:51:34 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f0002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:51:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:34 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:34 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:34 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf", 0x1c3}]) 01:51:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 386.571615][ T3675] usb 4-1: USB disconnect, device number 8 [ 386.610728][T11429] loop4: detected capacity change from 0 to 264192 01:51:34 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:34 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:34 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:34 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:34 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1fb}]) [ 386.895473][T11445] loop4: detected capacity change from 0 to 264192 [ 387.073409][ T3675] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 387.324636][ T3675] usb 4-1: Using ep0 maxpacket: 8 [ 387.453324][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.463701][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.474723][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 387.487603][ T3675] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.496966][ T3675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.506730][ T3675] usb 4-1: config 0 descriptor?? [ 387.544173][ T3675] usbtmc 4-1:0.0: bulk endpoints not found 01:51:37 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f0002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:51:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:51:37 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:37 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:37 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:37 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c4}]) 01:51:37 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 389.612065][ T3747] usb 4-1: USB disconnect, device number 9 [ 389.648819][T11454] loop4: detected capacity change from 0 to 264192 01:51:37 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:37 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:37 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:37 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c4}]) [ 389.898171][T11470] loop4: detected capacity change from 0 to 264192 [ 390.053389][ T3747] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 390.293400][ T3747] usb 4-1: Using ep0 maxpacket: 8 [ 390.413342][ T3747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.424194][ T3747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 390.435755][ T3747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 390.449066][ T3747] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 390.458607][ T3747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.469084][ T3747] usb 4-1: config 0 descriptor?? [ 390.514205][ T3747] usbtmc 4-1:0.0: bulk endpoints not found 01:51:40 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f0002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 01:51:40 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:40 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:40 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:40 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c4}]) 01:51:40 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 392.682182][ T3676] usb 4-1: USB disconnect, device number 10 01:51:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:40 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:40 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 392.734270][T11474] loop4: detected capacity change from 0 to 264192 01:51:40 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1e0}]) 01:51:40 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 392.925509][T11493] loop4: detected capacity change from 0 to 264192 [ 393.153512][ T3676] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 393.393385][ T3676] usb 4-1: Using ep0 maxpacket: 8 [ 393.513449][ T3676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.523681][ T3676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.534691][ T3676] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 393.547724][ T3676] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.556985][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.566873][ T3676] usb 4-1: config 0 descriptor?? [ 393.604324][ T3676] usbtmc 4-1:0.0: bulk endpoints not found 01:51:43 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:43 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:43 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:43 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c5}]) 01:51:43 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f0002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 395.759455][ T3673] usb 4-1: USB disconnect, device number 11 [ 395.792796][T11503] loop4: detected capacity change from 0 to 264192 01:51:43 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:43 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:43 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:43 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf9584", 0x1c5}]) 01:51:43 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x0, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:43 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:43 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:43 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c5}]) 01:51:43 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x0, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 396.103056][T11526] loop4: detected capacity change from 0 to 264192 [ 396.233456][ T3673] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 396.493306][ T3673] usb 4-1: Using ep0 maxpacket: 8 [ 396.613406][ T3673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.623868][ T3673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.635009][ T3673] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 396.647888][ T3673] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.657079][ T3673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.674200][ T3673] usb 4-1: config 0 descriptor?? [ 396.714419][ T3673] usbtmc 4-1:0.0: bulk endpoints not found 01:51:46 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f0002000000"], 0x0) 01:51:46 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:46 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:46 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x0, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:46 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d3}]) 01:51:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 398.860568][ T3673] usb 4-1: USB disconnect, device number 12 01:51:46 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:46 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 398.909679][T11540] loop4: detected capacity change from 0 to 264192 01:51:46 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d3}]) 01:51:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:46 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) [ 399.323330][ T3673] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 399.563316][ T3673] usb 4-1: Using ep0 maxpacket: 8 [ 399.684826][ T3673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.695030][ T3673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.706635][ T3673] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 399.719728][ T3673] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.729004][ T3673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.743412][ T3673] usb 4-1: config 0 descriptor?? [ 399.795701][ T3673] usbtmc 4-1:0.0: bulk endpoints not found [ 399.996035][ T3673] usb 4-1: USB disconnect, device number 13 01:51:48 executing program 3: 01:51:48 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:48 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d3}]) 01:51:48 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:48 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 01:51:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:48 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 3: [ 400.548143][T11565] loop4: detected capacity change from 0 to 264192 01:51:48 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:48 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1da}]) 01:51:48 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 01:51:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:48 executing program 3: 01:51:48 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:51:48 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 01:51:48 executing program 3: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 01:51:48 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 400.761122][T11577] loop4: detected capacity change from 0 to 264192 01:51:48 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f30", 0x1d4}]) 01:51:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 400.955899][T11596] loop4: detected capacity change from 0 to 264192 01:51:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 3: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 01:51:48 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) 01:51:48 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 01:51:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:48 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000400)=@udp6}, 0x20) 01:51:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 401.409061][T11617] loop4: detected capacity change from 0 to 264192 01:51:49 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000400)=@udp6}, 0x20) 01:51:49 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) [ 401.600393][T11636] loop4: detected capacity change from 0 to 264192 [ 401.674365][ T4096] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 01:51:49 executing program 3: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 01:51:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000400)=@udp6}, 0x20) 01:51:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) 01:51:49 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), 0x0}, 0x20) 01:51:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 401.974116][T11642] loop4: detected capacity change from 0 to 264192 01:51:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:49 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f30", 0x1d4}]) 01:51:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 402.358772][T11658] loop4: detected capacity change from 0 to 264192 01:51:50 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) 01:51:50 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), 0x0}, 0x20) 01:51:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:50 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f30", 0x1d4}]) 01:51:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:50 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), 0x0}, 0x20) 01:51:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 402.554431][T11670] loop4: detected capacity change from 0 to 264192 01:51:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:50 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) 01:51:50 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d0238a351c", 0x1da}]) [ 402.774322][T11685] loop1: detected capacity change from 0 to 264192 [ 402.833582][ T3675] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 403.033321][ T3675] usb 4-1: device descriptor read/64, error 18 [ 403.303356][ T3675] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 403.493734][ T3675] usb 4-1: device descriptor read/64, error 18 [ 403.613448][ T3675] usb usb4-port1: attempt power cycle [ 404.023390][ T3675] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 404.193554][ T3675] usb 4-1: device descriptor read/8, error -61 [ 404.463268][ T3675] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 404.633353][ T3675] usb 4-1: device descriptor read/8, error -61 [ 404.754061][ T3675] usb usb4-port1: unable to enumerate USB device 01:51:53 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) 01:51:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:53 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d6}]) 01:51:53 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1da}]) 01:51:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 405.585012][T11692] loop1: detected capacity change from 0 to 264192 [ 405.586513][T11695] loop4: detected capacity change from 0 to 264192 01:51:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 405.694424][T11695] loop4: AHDI p2 01:51:53 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1da}]) 01:51:53 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d6}]) 01:51:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 405.844976][T11705] loop4: detected capacity change from 0 to 264192 [ 405.852664][T11707] loop1: detected capacity change from 0 to 264192 [ 405.928855][T11705] loop4: AHDI p2 [ 406.034813][ T3686] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 406.247508][ T3686] usb 4-1: device descriptor read/64, error 18 [ 406.523319][ T3686] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 406.713285][ T3686] usb 4-1: device descriptor read/64, error 18 [ 406.835615][ T3686] usb usb4-port1: attempt power cycle [ 407.243258][ T3686] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 407.423398][ T3686] usb 4-1: device descriptor read/8, error -61 [ 407.703265][ T3686] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 407.914645][ T3686] usb 4-1: device descriptor read/8, error -61 [ 408.043453][ T3686] usb usb4-port1: unable to enumerate USB device 01:51:56 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) 01:51:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:56 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d0", 0x1d6}]) 01:51:56 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) [ 408.664412][T11716] loop4: detected capacity change from 0 to 264192 01:51:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:56 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) [ 408.757613][T11716] loop4: AHDI p2 01:51:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:56 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) 01:51:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 409.023340][ T3676] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 409.213482][ T3676] usb 4-1: device descriptor read/64, error 18 [ 409.483357][ T3676] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 409.673416][ T3676] usb 4-1: device descriptor read/64, error 18 [ 409.794205][ T3676] usb usb4-port1: attempt power cycle [ 410.204785][ T3676] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 410.385587][ T3676] usb 4-1: device descriptor read/8, error -61 [ 410.673276][ T3676] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 410.863394][ T3676] usb 4-1: device descriptor read/8, error -61 [ 410.984828][ T3676] usb usb4-port1: unable to enumerate USB device 01:51:59 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 01:51:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:59 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) 01:51:59 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) 01:51:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:51:59 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:51:59 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) 01:51:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 411.935912][T11753] loop1: detected capacity change from 0 to 264192 [ 412.253311][ T3675] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 412.443368][ T3675] usb 4-1: device descriptor read/64, error 18 [ 412.723361][ T3675] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 412.927287][ T3675] usb 4-1: device descriptor read/64, error 18 [ 413.064546][ T3675] usb usb4-port1: attempt power cycle [ 413.483308][ T3675] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 413.683495][ T3675] usb 4-1: device descriptor read/8, error -61 [ 413.953249][ T3675] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 414.123467][ T3675] usb 4-1: device descriptor read/8, error -61 [ 414.245705][ T3675] usb usb4-port1: unable to enumerate USB device 01:52:02 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 01:52:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:02 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) 01:52:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:52:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:52:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 414.835194][T11763] loop4: detected capacity change from 0 to 264192 [ 414.838144][T11766] loop1: detected capacity change from 0 to 264192 01:52:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:52:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:52:02 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="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", 0x1d7}]) [ 415.125892][T11778] loop1: detected capacity change from 0 to 264192 [ 415.273383][ T3675] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 415.463287][ T3675] usb 4-1: device descriptor read/64, error 18 [ 415.733880][ T3675] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 415.953483][ T3675] usb 4-1: device descriptor read/64, error 18 [ 416.084290][ T3675] usb usb4-port1: attempt power cycle [ 416.513336][ T3675] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 416.683595][ T3675] usb 4-1: device descriptor read/8, error -61 [ 416.953256][ T3675] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 417.134163][ T3675] usb 4-1: device descriptor read/8, error -61 [ 417.254369][ T3675] usb usb4-port1: unable to enumerate USB device 01:52:05 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 01:52:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:52:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r2, 0x540a, 0x1) 01:52:05 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) 01:52:05 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) 01:52:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 417.890854][T11787] loop1: detected capacity change from 0 to 264192 01:52:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:05 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) 01:52:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:05 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) 01:52:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 418.373252][ T3686] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 418.563403][ T3686] usb 4-1: device descriptor read/64, error 18 [ 418.833303][ T3686] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 419.023293][ T3686] usb 4-1: device descriptor read/64, error 18 [ 419.143530][ T3686] usb usb4-port1: attempt power cycle [ 419.553416][ T3686] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 419.723391][ T3686] usb 4-1: device descriptor read/8, error -61 [ 419.993306][ T3686] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 420.163955][ T3686] usb 4-1: device descriptor read/8, error -61 [ 420.283980][ T3686] usb usb4-port1: unable to enumerate USB device 01:52:08 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) 01:52:08 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) 01:52:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) [ 420.972101][T11814] loop1: detected capacity change from 0 to 264192 01:52:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:08 executing program 4: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:52:08 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:52:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 421.185168][T11828] loop1: detected capacity change from 0 to 264192 [ 421.403391][ T3686] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 421.643265][ T3686] usb 4-1: Using ep0 maxpacket: 8 [ 421.783390][ T3686] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.797826][ T3686] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.806953][ T3686] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.816164][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.833052][ T3686] usb 4-1: config 0 descriptor?? [ 422.098576][ T3686] usb 4-1: USB disconnect, device number 38 01:52:10 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) 01:52:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:10 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 01:52:10 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:52:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:52:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 422.633460][T11836] loop1: detected capacity change from 0 to 264192 01:52:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r2, 0x540a, 0x1) 01:52:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x644}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000013b00)) 01:52:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:10 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:52:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 422.762253][T11848] loop4: detected capacity change from 0 to 264192 [ 422.828695][T11848] EXT4-fs error (device loop4): __ext4_fill_super:5326: inode #2: comm syz-executor.4: iget: root inode unallocated 01:52:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 422.871993][T11855] loop1: detected capacity change from 0 to 264192 [ 422.883133][T11848] EXT4-fs (loop4): get root inode failed [ 422.889103][T11848] EXT4-fs (loop4): mount failed [ 422.944701][ T3686] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 423.213420][ T3686] usb 4-1: Using ep0 maxpacket: 8 [ 423.373536][ T3686] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.383894][ T3686] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.395040][ T3686] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.404569][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.415583][ T3686] usb 4-1: config 0 descriptor?? [ 423.657746][ T3686] usb 4-1: USB disconnect, device number 39 01:52:11 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) 01:52:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:11 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c", 0xed}]) 01:52:11 executing program 4: syz_mount_image$jfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, &(0x7f0000002a00), 0x0, &(0x7f0000002a80)=ANY=[]) 01:52:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 424.192228][T11866] loop1: detected capacity change from 0 to 264192 [ 424.225644][T11864] Mount JFS Failure: -22 [ 424.229922][T11864] jfs_mount failed w/return code = -22 01:52:11 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c", 0xed}]) 01:52:11 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 424.405163][T11877] loop1: detected capacity change from 0 to 264192 01:52:12 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c", 0xed}]) [ 424.533494][ T3747] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 424.547521][T11881] loop1: detected capacity change from 0 to 264192 01:52:12 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x164}]) [ 424.673474][ T3675] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 424.768270][T11883] loop1: detected capacity change from 0 to 264192 [ 424.803475][ T3747] usb 4-1: Using ep0 maxpacket: 8 01:52:12 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x164}]) [ 424.943674][ T3747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.954467][ T3675] usb 5-1: Using ep0 maxpacket: 8 [ 424.960139][ T3747] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.970154][ T3747] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.980274][ T3747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.999903][ T3747] usb 4-1: config 0 descriptor?? [ 425.073502][ T3675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.103059][ T3675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 425.140369][ T3675] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 425.151557][ T3675] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.163321][ T3675] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 425.172761][ T3675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.184037][ T3675] usb 5-1: config 0 descriptor?? [ 425.261601][ T3676] usb 4-1: USB disconnect, device number 40 [ 425.463387][ T3675] usb 5-1: GET_CAPABILITIES returned 0 [ 425.469062][ T3675] usbtmc 5-1:0.0: can't read capabilities [ 425.693361][T11879] usbtmc 5-1:0.0: send_request_dev_dep_msg_in returned -71 [ 425.703677][ T3676] usb 5-1: USB disconnect, device number 69 01:52:13 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03"], 0x0) 01:52:13 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x164}]) 01:52:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) [ 425.804554][T11893] loop1: detected capacity change from 0 to 264192 01:52:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:13 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x19f}]) [ 425.971473][T11903] loop1: detected capacity change from 0 to 264192 [ 426.113242][ T3675] usb 4-1: new high-speed USB device number 41 using dummy_hcd 01:52:13 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:52:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:13 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x19f}]) 01:52:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 426.248210][T11907] loop1: detected capacity change from 0 to 264192 [ 426.353415][ T3675] usb 4-1: Using ep0 maxpacket: 8 [ 426.503343][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.514038][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.523327][ T3673] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 426.527472][ T3675] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.544400][ T3675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.556155][ T3675] usb 4-1: config 0 descriptor?? [ 426.594199][ T3675] usbtmc 4-1:0.0: bulk endpoints not found [ 426.793337][ T3673] usb 5-1: Using ep0 maxpacket: 8 [ 426.803383][ T141] usb 4-1: USB disconnect, device number 41 [ 426.913628][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 426.928275][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.939884][ T3673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.950256][ T3673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.960498][ T3673] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.969759][ T3673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.983728][ T3673] usb 5-1: config 0 descriptor?? [ 427.243439][ T3673] usb 5-1: GET_CAPABILITIES returned 0 [ 427.248990][ T3673] usbtmc 5-1:0.0: can't read capabilities 01:52:14 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03"], 0x0) 01:52:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:14 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x19f}]) 01:52:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 427.338233][T11916] loop1: detected capacity change from 0 to 264192 01:52:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 427.494795][T11909] usbtmc 5-1:0.0: send_request_dev_dep_msg_in returned -71 [ 427.515799][ T3678] usb 5-1: USB disconnect, device number 70 [ 427.633383][ T3676] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 427.903360][ T3676] usb 4-1: Using ep0 maxpacket: 8 01:52:15 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:52:15 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1bd}]) 01:52:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 428.044007][ T3676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.056682][T11933] loop1: detected capacity change from 0 to 264192 [ 428.063320][ T3676] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 01:52:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 428.091106][ T3676] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.108696][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.134660][ T3676] usb 4-1: config 0 descriptor?? [ 428.226909][ T3676] usbtmc 4-1:0.0: bulk endpoints not found [ 428.353494][ T3686] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 428.426838][ T3675] usb 4-1: USB disconnect, device number 42 [ 428.593296][ T3686] usb 5-1: Using ep0 maxpacket: 8 [ 428.715444][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.726604][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 428.738298][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 428.748561][ T3686] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.758616][ T3686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.768871][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.790310][ T3686] usb 5-1: config 0 descriptor?? 01:52:16 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03"], 0x0) 01:52:16 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1bd}]) 01:52:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:52:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 428.956825][T11943] loop1: detected capacity change from 0 to 264192 01:52:16 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1bd}]) [ 429.053562][ T3686] usb 5-1: GET_CAPABILITIES returned 0 [ 429.059369][ T3686] usbtmc 5-1:0.0: can't read capabilities [ 429.181257][T11954] loop1: detected capacity change from 0 to 264192 [ 429.273356][ T141] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 429.283460][T11935] usbtmc 5-1:0.0: send_request_dev_dep_msg_in returned -71 [ 429.299001][ T3686] usb 5-1: USB disconnect, device number 71 [ 429.533574][ T141] usb 4-1: Using ep0 maxpacket: 8 [ 429.653651][ T141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.664141][ T141] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.677610][ T141] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.687132][ T141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.705341][ T141] usb 4-1: config 0 descriptor?? [ 429.744242][ T141] usbtmc 4-1:0.0: bulk endpoints not found 01:52:17 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 01:52:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:17 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1cc}]) 01:52:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 429.836736][T11960] loop1: detected capacity change from 0 to 264192 [ 429.947252][ T141] usb 4-1: USB disconnect, device number 43 [ 430.163371][ T3676] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 430.423327][ T3676] usb 5-1: Using ep0 maxpacket: 8 01:52:18 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f"], 0x0) 01:52:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:18 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1cc}]) 01:52:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 430.487475][T11968] loop1: detected capacity change from 0 to 264192 01:52:18 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1cc}]) 01:52:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:18 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d3}]) [ 430.563647][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.591123][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 430.645022][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 430.667202][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.710054][ T3676] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.725221][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.745568][T11981] loop1: detected capacity change from 0 to 264192 [ 430.759360][ T3676] usb 5-1: config 0 descriptor?? [ 430.773374][ T6] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 431.013439][ T3676] usb 5-1: GET_CAPABILITIES returned 0 [ 431.015913][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 431.019205][ T3676] usbtmc 5-1:0.0: can't read capabilities [ 431.143367][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.154075][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.165174][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 431.182686][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 431.195805][ T6] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.205052][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.215139][ T6] usb 4-1: config 0 descriptor?? [ 431.223341][ T141] usb 5-1: USB disconnect, device number 72 [ 431.254292][ T6] usbtmc 4-1:0.0: bulk endpoints not found [ 431.458610][ T141] usb 4-1: USB disconnect, device number 44 01:52:19 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 01:52:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:19 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d3}]) [ 431.750663][T11985] loop1: detected capacity change from 0 to 264192 01:52:19 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe0301"], 0x0) 01:52:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:19 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d3}]) [ 431.994984][T11994] loop1: detected capacity change from 0 to 264192 01:52:19 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) [ 432.063411][ T141] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 432.159709][T12000] loop1: detected capacity change from 0 to 264192 01:52:19 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) 01:52:19 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) [ 432.283518][ T3673] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 432.313449][ T141] usb 5-1: Using ep0 maxpacket: 8 01:52:19 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) [ 432.348418][T12004] loop1: detected capacity change from 0 to 264192 01:52:20 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d0", 0x1d6}]) [ 432.443750][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 432.460619][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 432.475373][T12008] loop1: detected capacity change from 0 to 264192 [ 432.486310][ T141] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 432.496902][ T141] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.507892][ T141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.517449][ T141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.525985][ T3673] usb 4-1: Using ep0 maxpacket: 8 [ 432.547544][ T141] usb 5-1: config 0 descriptor?? [ 432.548087][T12008] loop1: AHDI p2 [ 432.653629][ T3673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.665071][ T3673] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.678226][ T3673] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.687495][ T3673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.712704][ T3673] usb 4-1: config 0 descriptor?? [ 432.754012][ T3673] usbtmc 4-1:0.0: bulk endpoints not found [ 432.823520][ T141] usb 5-1: GET_CAPABILITIES returned 0 [ 432.829049][ T141] usbtmc 5-1:0.0: can't read capabilities [ 432.956402][ T141] usb 4-1: USB disconnect, device number 45 [ 433.025427][ T3673] usb 5-1: USB disconnect, device number 73 01:52:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:21 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d6}]) 01:52:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:21 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 01:52:21 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe0301"], 0x0) [ 433.566018][T12017] loop1: detected capacity change from 0 to 264192 01:52:21 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d6}]) [ 433.625910][ T4096] loop1: AHDI p2 [ 433.639220][T12017] loop1: AHDI p2 01:52:21 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) 01:52:21 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) [ 433.833415][ T3678] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 433.873389][ T6] usb 5-1: new high-speed USB device number 74 using dummy_hcd 01:52:21 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) 01:52:21 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) [ 434.083391][ T3678] usb 4-1: Using ep0 maxpacket: 8 [ 434.143601][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 434.169358][T12033] loop1: detected capacity change from 0 to 264192 [ 434.203495][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.214445][ T3678] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.232603][ T3678] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.242243][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.262295][ T3678] usb 4-1: config 0 descriptor?? [ 434.273766][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 434.285370][ T4096] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 434.291745][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.309248][ T3678] usbtmc 4-1:0.0: bulk endpoints not found 01:52:21 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="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", 0x1d7}]) [ 434.316939][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 01:52:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 434.357328][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.372303][ T6] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.392619][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:52:22 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="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", 0x1d7}]) 01:52:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 434.454097][ T6] usb 5-1: config 0 descriptor?? [ 434.521390][ T3678] usb 4-1: USB disconnect, device number 46 [ 434.713535][ T6] usb 5-1: GET_CAPABILITIES returned 0 [ 434.719454][ T6] usbtmc 5-1:0.0: can't read capabilities [ 434.924334][ T3678] usb 5-1: USB disconnect, device number 74 01:52:23 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 01:52:23 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="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", 0x1d7}]) 01:52:23 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe0301"], 0x0) 01:52:23 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) 01:52:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 435.456614][T12053] loop2: detected capacity change from 0 to 264192 01:52:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:23 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) [ 435.671002][T12064] loop2: detected capacity change from 0 to 264192 01:52:23 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) [ 435.713365][ T3678] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 435.753404][ T141] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 435.853504][T12067] loop2: detected capacity change from 0 to 264192 01:52:23 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) 01:52:23 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) [ 435.953274][ T3678] usb 4-1: Using ep0 maxpacket: 8 [ 436.013447][ T141] usb 5-1: Using ep0 maxpacket: 8 01:52:23 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) [ 436.073340][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.108762][ T3678] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.130233][ T3678] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.139591][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.157487][ T3678] usb 4-1: config 0 descriptor?? [ 436.173476][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.184747][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 436.195120][ T3678] usbtmc 4-1:0.0: bulk endpoints not found [ 436.216317][ T141] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 436.248205][ T141] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.292068][ T141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.322309][ T141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.365095][ T141] usb 5-1: config 0 descriptor?? [ 436.397184][ T3678] usb 4-1: USB disconnect, device number 47 [ 436.633366][ T141] usb 5-1: usb_control_msg returned -71 [ 436.639110][ T141] usbtmc 5-1:0.0: can't read capabilities [ 436.665023][ T141] usb 5-1: USB disconnect, device number 75 01:52:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:52:24 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:52:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:24 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe0301000905"], 0x0) 01:52:24 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) [ 437.154213][T12081] loop2: detected capacity change from 0 to 264192 01:52:24 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:52:24 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}]) 01:52:24 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) [ 437.321007][T12092] loop2: detected capacity change from 0 to 264192 01:52:24 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) 01:52:25 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {0x0}]) [ 437.443398][ T3678] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 437.453402][ T141] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 437.472229][T12096] loop2: detected capacity change from 0 to 264192 01:52:25 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) [ 437.594899][T12098] loop2: detected capacity change from 0 to 264192 [ 437.703369][ T3678] usb 4-1: Using ep0 maxpacket: 8 [ 437.703378][ T141] usb 5-1: Using ep0 maxpacket: 8 [ 437.823523][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.836023][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 437.851593][ T141] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 437.863707][ T141] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.868219][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.874167][ T141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.898280][ T141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.901978][ T3678] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 437.928644][ T141] usb 5-1: config 0 descriptor?? [ 437.940542][ T3678] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 437.954786][ T3678] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.964076][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:52:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:52:25 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:52:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 437.989960][ T3678] usb 4-1: config 0 descriptor?? [ 438.031948][T12103] loop2: detected capacity change from 0 to 264192 [ 438.039882][ T3678] usbtmc 4-1:0.0: bulk endpoints not found [ 438.197530][ T141] usb 5-1: usb_control_msg returned -71 [ 438.203128][ T141] usbtmc 5-1:0.0: can't read capabilities [ 438.234483][ T141] usb 5-1: USB disconnect, device number 76 [ 438.244168][ T3678] usb 4-1: USB disconnect, device number 48 01:52:26 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe0301000905"], 0x0) 01:52:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:26 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)}]) 01:52:26 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) [ 438.782177][T12116] loop2: detected capacity change from 0 to 264192 01:52:26 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f", 0xec}]) 01:52:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:52:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:52:26 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f", 0xec}]) [ 439.016928][T12127] loop2: detected capacity change from 0 to 264192 01:52:26 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f", 0xec}]) [ 439.073542][ T3678] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 439.083277][ T141] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 439.193096][T12131] loop2: detected capacity change from 0 to 264192 01:52:26 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x162}]) 01:52:26 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247f", 0x162}]) [ 439.343383][ T141] usb 4-1: Using ep0 maxpacket: 8 [ 439.364770][ T3678] usb 5-1: Using ep0 maxpacket: 8 [ 439.366712][T12135] loop2: detected capacity change from 0 to 264192 01:52:27 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x162}]) [ 439.463397][ T141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.478790][ T141] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 439.490105][ T141] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 439.493597][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.504244][ T141] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 439.523994][ T141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.534142][T12137] loop2: detected capacity change from 0 to 264192 [ 439.547441][ T141] usb 4-1: config 0 descriptor?? [ 439.553523][ T3678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 439.570842][ T3678] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 439.581916][ T3678] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 439.585748][ T141] usbtmc 4-1:0.0: bulk endpoints not found [ 439.624151][ T3678] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 439.659333][ T3678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.688470][ T3678] usb 5-1: config 0 descriptor?? [ 439.790231][ T141] usb 4-1: USB disconnect, device number 49 [ 439.815171][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.821593][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.983442][ T3678] usb 5-1: usb_control_msg returned -71 [ 439.989111][ T3678] usbtmc 5-1:0.0: can't read capabilities [ 440.003629][ T3678] usb 5-1: USB disconnect, device number 77 01:52:27 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe0301000905"], 0x0) 01:52:27 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd27", 0x19d}]) 01:52:27 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe0301000905"], 0x0) [ 440.347443][T12141] loop2: detected capacity change from 0 to 264192 01:52:28 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 01:52:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:52:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x19d}]) [ 440.519040][T12147] loop2: detected capacity change from 0 to 264192 01:52:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd27", 0x19d}]) 01:52:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f", 0x1ba}]) [ 440.623690][ T3678] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 440.643409][ T3676] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 440.710591][T12157] loop2: detected capacity change from 0 to 264192 01:52:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1ba}]) 01:52:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f", 0x1ba}]) [ 440.903292][T12161] loop2: detected capacity change from 0 to 264192 [ 440.903557][ T3678] usb 2-1: Using ep0 maxpacket: 8 [ 440.915478][ T3676] usb 4-1: Using ep0 maxpacket: 8 01:52:28 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db09", 0x1c9}]) [ 441.043626][ T3676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.053042][T12163] loop2: detected capacity change from 0 to 264192 [ 441.054080][ T3678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.075113][ T3676] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 441.086545][ T3678] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 441.097823][ T3676] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 441.121192][ T3678] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 441.140411][ T3676] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.150724][ T3678] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.160592][ T3676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.169260][ T3678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.183810][ T3676] usb 4-1: config 0 descriptor?? [ 441.191009][ T3678] usb 2-1: config 0 descriptor?? [ 441.244368][ T3676] usbtmc 4-1:0.0: bulk endpoints not found [ 441.251322][ T3678] usbtmc 2-1:0.0: bulk endpoints not found [ 441.445734][ T3673] usb 4-1: USB disconnect, device number 50 [ 441.479902][ T3678] usb 2-1: USB disconnect, device number 6 01:52:29 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d"], 0x0) 01:52:29 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 01:52:29 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd27", 0x19d}]) 01:52:29 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1c9}]) 01:52:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 01:52:29 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db09", 0x1c9}]) [ 442.013783][T12171] loop2: detected capacity change from 0 to 264192 [ 442.045092][T12175] loop1: detected capacity change from 0 to 264192 01:52:29 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d0}]) 01:52:29 executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 442.197738][T12183] loop2: detected capacity change from 0 to 264192 01:52:29 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d0}]) [ 442.293912][ T3678] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 442.310529][ T4096] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 442.367719][T12185] loop2: detected capacity change from 0 to 264192 01:52:30 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d0}]) 01:52:30 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) [ 442.436772][ T141] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 442.533755][ T3678] usb 4-1: Using ep0 maxpacket: 8 [ 442.563027][T12189] loop2: detected capacity change from 0 to 264192 [ 442.653474][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.675780][ T3678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 442.689146][ T3678] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 442.702898][ T3678] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.713426][ T141] usb 2-1: Using ep0 maxpacket: 8 [ 442.719065][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.752971][ T3678] usb 4-1: config 0 descriptor?? [ 442.804218][ T3678] usbtmc 4-1:0.0: bulk endpoints not found [ 442.861985][ T141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.873033][ T141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.892399][ T141] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.902671][ T141] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.917187][ T141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.926368][ T141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.941974][ T141] usb 2-1: config 0 descriptor?? [ 443.005491][ T3678] usb 4-1: USB disconnect, device number 51 [ 443.203481][ T141] usb 2-1: GET_CAPABILITIES returned 0 [ 443.208999][ T141] usbtmc 2-1:0.0: can't read capabilities [ 443.433354][T12181] usbtmc 2-1:0.0: send_request_dev_dep_msg_in returned -71 [ 443.445481][ T141] usb 2-1: USB disconnect, device number 7 01:52:31 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d"], 0x0) 01:52:31 executing program 4: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 01:52:31 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) 01:52:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) [ 443.545578][T12196] loop2: detected capacity change from 0 to 264192 01:52:31 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d4}]) [ 443.680000][T12203] loop2: detected capacity change from 0 to 264192 01:52:31 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d6}]) 01:52:31 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d6}]) [ 443.860932][T12207] loop2: detected capacity change from 0 to 264192 [ 443.868328][ T6] usb 4-1: new high-speed USB device number 52 using dummy_hcd 01:52:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_tables_targets\x00') read$watch_queue(r0, &(0x7f0000000100)=""/4096, 0x1000) read$watch_queue(r0, 0x0, 0x0) [ 443.929156][ T4096] loop2: AHDI p2 [ 443.939990][T12207] loop2: AHDI p2 01:52:31 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{&(0x7f0000000000), 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d6}]) 01:52:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_tables_targets\x00') read$watch_queue(r0, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000000)=""/245, 0xf5) 01:52:31 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) [ 444.153371][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 444.283547][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.294128][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 444.305072][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 444.326947][ T6] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.336668][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.350525][ T6] usb 4-1: config 0 descriptor?? [ 444.415806][ T6] usbtmc 4-1:0.0: bulk endpoints not found [ 444.619399][ T6] usb 4-1: USB disconnect, device number 52 01:52:32 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d"], 0x0) 01:52:32 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:52:32 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) 01:52:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_tables_targets\x00') read$watch_queue(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) read$watch_queue(r0, &(0x7f0000000000)=""/245, 0xf5) 01:52:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_tables_targets\x00') read$watch_queue(r0, &(0x7f0000000000)=""/245, 0xf5) 01:52:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_tables_targets\x00') read$watch_queue(r0, &(0x7f0000000000)=""/245, 0xf5) 01:52:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:32 executing program 0: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:52:32 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000004280)=[{&(0x7f0000001000)="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", 0x1d7}]) 01:52:32 executing program 0: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:33 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) [ 445.443390][ T3678] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 445.562869][T12241] loop2: detected capacity change from 0 to 264192 [ 445.693425][ T3678] usb 4-1: Using ep0 maxpacket: 8 [ 445.815153][ T3678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.830665][ T3678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 445.841132][ T3678] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.854735][ T3678] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.864421][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.874296][ T3678] usb 4-1: config 0 descriptor?? [ 445.914531][ T3678] usbtmc 4-1:0.0: bulk endpoints not found [ 446.121229][ T3676] usb 4-1: USB disconnect, device number 53 01:52:34 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:52:34 executing program 0: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:34 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="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", 0x1d7}]) 01:52:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x0) 01:52:34 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:52:34 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) 01:52:34 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:34 executing program 0: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f"], 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x101, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x10, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1edd71a2a8"}, {0x5, 0x24, 0x0, 0xe441}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x2, 0xff}, {0x6, 0x24, 0x1a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x418, 0xff, 0x40, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x0, 0xce}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0x0, 0xc3, 0x10, 0x8}, 0x101, &(0x7f0000000100)={0x5, 0xf, 0x101, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x7, 0x8001}, @generic={0xb4, 0x10, 0xb, "79033eacdbe5d92b6b715f0873969c1f4aa86b45b1b9224f4f0abddfa4374e0f677d2950ad4cef8f018feddc65b6ef16093da18d13b100895cc9c47f15e71d82046428620c65606da7733a9c440a4edf68ae184c35891a3fab2f30ec88ff1ae07e0761411ed3116fb82b77e40a11f6cd3b35bf2167fbdd4232bc205186517782f942bef7a7c5d87959bafd1f557ec67e1cae46e69ca27abce057bd3f6840d42a153abfb18ec741eba70a8f210c7f59676f"}, @ptm_cap={0x3}, @generic={0x30, 0x10, 0x1, "f3485fc8013b8477da15cbe6b25d6c89b2e200f40336a3234785330d352a2d973bba3729c9461fbb4f1bee646a"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x3f, 0x3, 0x6, 0x39}]}, 0x9, [{0x2b, &(0x7f0000000240)=@string={0x2b, 0x3, "fbfb6ab7c517ece765fa4d24e8aedf20afb4b1aac99ce4305e284775a1e1c45579132fc53bc50de845"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xff, &(0x7f0000000300)=@string={0xff, 0x3, "e8cafd672175e534c1982f10d569d8a242391a2d6554f7b5a5a9be98260dc8d7334cf9db3b81dea25032fbe31262863b48a637048cb5e75a1ad9cf5227da9efc7b75c6c7cce87953d12b7063c21a2b7bdee5053332759b6dba8d3c16abfc5154448c781f74b4d818b5d651ed0222f257c460abf8c552c83da1d980f49a1b7d71e978e1f5b83f876af0f055749eb8aee48afe52712447ddfcc8dc4433254757cdc3c158ff349fd08625a21c49b2f4f53276a8acf2233c88b5a11b5906fdf467baa74045dc36e04036bb0cc7afacfbf22d6207ad0ee6a2e94110519e9afb70a253ad417ed8e1d83231f6f8bb421bf150020b07cf6783c23fa8056f75c9de"}}, {0xff, &(0x7f0000000400)=@string={0xff, 0x3, "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"}}, {0x66, &(0x7f0000000500)=@string={0x66, 0x3, "6c3a1fd0cea34cb0fc347589a43c016308978dd266f78086e083a91ec3c2a3931adcbd64d370a8f2f9d3a1d53b537b496b43dc08b0e60672caea245456e692442c7bbd0c4fe01595252f85b787c9f55781662b2483f198f34c97ce9a78000986f6493d35"}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "f7e7f7be6ac18df818b0ba988e8e7fc898be98beebdfb69a5650143cc2343b0020e7ce54bc71fad0e7c1724fd89819f1fe125160d2ccb1591940a8b13dccd22cda04e62213d852e165f6a086ebbc685933060703963a2a2d7fd886942dab64177be513651ff3158ffd3540a608e8f158a234ceeadeccd6f91af276579c5524d48e73819815fdcb95a012a7494ff47968436be8286c57aa31e08353d39495110876d3797e6d2348caec8f77a88670bea5b7fa29dc444c7c47403e77ce08220348358d7e9c4c26c951a2007fa7a6e4c2478cf4444329e895fa214c1c0f39a6dec2b4e6db"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x40, 0x24, 0xc3, {0xc3, 0x23, "1ca252e61e99d3ef04b9e35401f2dcb53563d4b9dfadec718180ef4ca7bf23502f4ef208c4bcb681db9fd84429a54a1361af054767edf77c4fb6231019a9b16743689f5c5bd92069685aef0fb3e5bac0cb6576f1c49e4705cf895cf5bb00e4291bb36d37b540c0ddf76a9c32e9398248663db9b8d6494c65b4bde62a93dccf640b1f27701e49b852dc72fe58cc66a1850a7b05f12e8fc08a90a9256b11d373f5acdec721b80e039c9849625a23f4f9ea9aa7325128b9b8ca5bbec05d1e58572567"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000900)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x8, 0x7f, 0x20, "02cae4ae", "7d25d4ff"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x0, 0x1, 0x84, 0x5, 0x800, 0x3}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x20, 0x0, 0xc2, "8c47fbc67d8a70b750024af1c87a3266f5bf71a947a58635854df138738e2b80eeda4fd5cfcbe978fa9fe85322a1d2a7bc0365407f01bc69a9e252225d9fc6cdc510abccb17e352703eadc4e029e5e17dbbd54be7de7069223d10b90d419ba9ed7320a21519d22aeb389be0abeb48c56001c91ef20c4ddebd9c9378a60041a3fd184a66a87a71e5457d3948660107b658ec545da7bf84219f14e37e68a30c6f5c6719fda0d4fb99b47e126eff87064a6b2b5c18d251045d810548baaf5680e33275b"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x400, 0x2}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "5ea7"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d40)={0x40, 0x17, 0x6}, &(0x7f0000000d80)={0x40, 0x19, 0x2, '>a'}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x3f}}) 01:52:34 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0}, {&(0x7f0000001000)="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", 0x1d7}]) 01:52:34 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:34 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) (fail_nth: 1) 01:52:34 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 447.183371][ T3676] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 447.195622][T12270] FAULT_INJECTION: forcing a failure. [ 447.195622][T12270] name failslab, interval 1, probability 0, space 0, times 1 [ 447.243576][T12270] CPU: 0 PID: 12270 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 447.254135][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.264206][T12270] Call Trace: [ 447.267505][T12270] [ 447.270447][T12270] dump_stack_lvl+0x1e3/0x2cb [ 447.275237][T12270] ? bfq_pos_tree_add_move+0x436/0x436 [ 447.280716][T12270] ? panic+0x76e/0x76e [ 447.284803][T12270] ? __might_sleep+0xc0/0xc0 [ 447.289489][T12270] should_fail+0x384/0x4b0 [ 447.293984][T12270] ? __se_sys_memfd_create+0xe9/0x450 [ 447.299431][T12270] should_failslab+0x5/0x20 [ 447.304022][T12270] __kmalloc+0x8b/0x370 [ 447.308258][T12270] ? strnlen_user+0x187/0x240 [ 447.313004][T12270] __se_sys_memfd_create+0xe9/0x450 [ 447.318215][T12270] do_syscall_64+0x2b/0x70 [ 447.322634][T12270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 447.328580][T12270] RIP: 0033:0x7eff7b8890e9 [ 447.332992][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 447.352595][T12270] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 447.361011][T12270] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890e9 [ 447.368975][T12270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007eff7b8e21ee [ 447.376936][T12270] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 447.384899][T12270] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 447.392878][T12270] R13: 00007ffe2267071f R14: 0000000008100000 R15: 0000000000022000 [ 447.400882][T12270] 01:52:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:35 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) (fail_nth: 2) 01:52:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) (fail_nth: 1) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:35 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 447.533630][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 447.539742][T12280] FAULT_INJECTION: forcing a failure. [ 447.539742][T12280] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 447.595662][T12280] CPU: 0 PID: 12280 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 447.606203][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.616250][T12280] Call Trace: [ 447.619516][T12280] [ 447.622431][T12280] dump_stack_lvl+0x1e3/0x2cb [ 447.627100][T12280] ? bfq_pos_tree_add_move+0x436/0x436 [ 447.632548][T12280] ? panic+0x76e/0x76e [ 447.636605][T12280] ? __virt_addr_valid+0x21b/0x2d0 [ 447.641777][T12280] should_fail+0x384/0x4b0 [ 447.646184][T12280] _copy_from_user+0x2b/0x160 [ 447.650895][T12280] __se_sys_memfd_create+0x125/0x450 [ 447.653601][ T3676] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.656168][T12280] do_syscall_64+0x2b/0x70 [ 447.656193][T12280] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 447.676519][T12280] RIP: 0033:0x7eff7b8890e9 [ 447.680920][T12280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 447.700621][T12280] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 447.709229][T12280] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890e9 [ 447.717184][T12280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007eff7b8e21ee [ 447.725143][T12280] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 447.733101][T12280] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 447.741057][T12280] R13: 00007ffe2267071f R14: 0000000008100000 R15: 0000000000022000 [ 447.749020][T12280] 01:52:35 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) [ 447.799887][ T3676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 447.824677][T12283] FAULT_INJECTION: forcing a failure. [ 447.824677][T12283] name failslab, interval 1, probability 0, space 0, times 0 [ 447.857944][T12283] CPU: 0 PID: 12283 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 447.868495][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.878560][T12283] Call Trace: [ 447.881839][T12283] [ 447.884759][T12283] dump_stack_lvl+0x1e3/0x2cb [ 447.889437][T12283] ? bfq_pos_tree_add_move+0x436/0x436 [ 447.894894][T12283] ? panic+0x76e/0x76e [ 447.898953][T12283] ? __might_sleep+0xc0/0xc0 [ 447.903545][T12283] should_fail+0x384/0x4b0 [ 447.907959][T12283] ? kvmalloc_node+0x6e/0x160 [ 447.912695][T12283] should_failslab+0x5/0x20 [ 447.917186][T12283] __kmalloc_node+0x8e/0x400 [ 447.921765][T12283] ? tty_ldisc_ref_wait+0x21/0x70 [ 447.926853][T12283] kvmalloc_node+0x6e/0x160 [ 447.931345][T12283] file_tty_write+0x34b/0x960 [ 447.936014][T12283] ? n_tty_read+0x1c90/0x1c90 [ 447.940692][T12283] vfs_write+0xa22/0xd40 [ 447.944968][T12283] ? __lock_acquire+0x1f80/0x1f80 [ 447.949998][T12283] ? file_end_write+0x230/0x230 [ 447.954841][T12283] ? __fget_files+0x3d0/0x440 [ 447.959526][T12283] ? __fdget_pos+0x1d7/0x2e0 [ 447.964103][T12283] ? ksys_write+0x77/0x2c0 [ 447.968605][T12283] ksys_write+0x19b/0x2c0 [ 447.972924][T12283] ? print_irqtrace_events+0x220/0x220 [ 447.978388][T12283] ? __ia32_sys_read+0x80/0x80 [ 447.983145][T12283] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 447.989123][T12283] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 447.995095][T12283] do_syscall_64+0x2b/0x70 [ 447.999496][T12283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 448.005379][T12283] RIP: 0033:0x7f802a0890e9 [ 448.009782][T12283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 448.029375][T12283] RSP: 002b:00007f8028ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.037780][T12283] RAX: ffffffffffffffda RBX: 00007f802a19bf60 RCX: 00007f802a0890e9 [ 448.045745][T12283] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 448.053703][T12283] RBP: 00007f8028ffe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 448.061660][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.069620][T12283] R13: 00007ffea4c4a09f R14: 00007f8028ffe300 R15: 0000000000022000 [ 448.077681][T12283] [ 448.081177][ T3676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 448.091027][ T3676] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 01:52:35 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) (fail_nth: 3) [ 448.104760][ T3676] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.114083][ T3676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.134069][ T3676] usb 1-1: config 0 descriptor?? [ 448.184053][ T3676] usbtmc 1-1:0.0: bulk endpoints not found [ 448.267163][T12291] FAULT_INJECTION: forcing a failure. [ 448.267163][T12291] name failslab, interval 1, probability 0, space 0, times 0 [ 448.301318][T12291] CPU: 1 PID: 12291 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 448.311954][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.322102][T12291] Call Trace: [ 448.325475][T12291] [ 448.328420][T12291] dump_stack_lvl+0x1e3/0x2cb [ 448.333130][T12291] ? bfq_pos_tree_add_move+0x436/0x436 [ 448.338595][T12291] ? panic+0x76e/0x76e [ 448.342671][T12291] ? __might_sleep+0xc0/0xc0 [ 448.347264][T12291] should_fail+0x384/0x4b0 [ 448.351673][T12291] ? shmem_alloc_inode+0x21/0x40 [ 448.356598][T12291] should_failslab+0x5/0x20 [ 448.361096][T12291] kmem_cache_alloc_lru+0x75/0x2d0 [ 448.366319][T12291] ? alloc_fd+0x5ae/0x650 [ 448.370641][T12291] shmem_alloc_inode+0x21/0x40 [ 448.375400][T12291] ? shmem_match+0x150/0x150 [ 448.380002][T12291] new_inode_pseudo+0x61/0x210 [ 448.384830][T12291] new_inode+0x25/0x1d0 [ 448.389006][T12291] ? do_raw_spin_unlock+0x134/0x8a0 [ 448.394258][T12291] shmem_get_inode+0x2ff/0xae0 [ 448.399026][T12291] __shmem_file_setup+0x11e/0x270 [ 448.404053][T12291] __se_sys_memfd_create+0x1d5/0x450 [ 448.409364][T12291] do_syscall_64+0x2b/0x70 [ 448.413975][T12291] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 448.419878][T12291] RIP: 0033:0x7eff7b8890e9 [ 448.424306][T12291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 448.444034][T12291] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 448.452466][T12291] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890e9 [ 448.453437][ T6] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 448.460434][T12291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007eff7b8e21ee [ 448.460456][T12291] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 448.460467][T12291] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 448.460479][T12291] R13: 00007ffe2267071f R14: 0000000008100000 R15: 0000000000022000 [ 448.460509][T12291] 01:52:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) (fail_nth: 2) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 448.528454][T12266] UDC core: couldn't find an available UDC or it's busy: -16 [ 448.589515][T12293] FAULT_INJECTION: forcing a failure. [ 448.589515][T12293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.604218][T12266] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 448.621066][ T3673] usb 1-1: USB disconnect, device number 5 [ 448.626716][T12293] CPU: 1 PID: 12293 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 448.637596][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.647662][T12293] Call Trace: [ 448.650949][T12293] [ 448.653878][T12293] dump_stack_lvl+0x1e3/0x2cb [ 448.658562][T12293] ? bfq_pos_tree_add_move+0x436/0x436 [ 448.664020][T12293] ? panic+0x76e/0x76e [ 448.668091][T12293] ? __lock_acquire+0x1f80/0x1f80 [ 448.673294][T12293] should_fail+0x384/0x4b0 [ 448.677727][T12293] _copy_from_iter+0x25c/0xec0 [ 448.682657][T12293] ? copy_mc_pipe_to_iter+0x460/0x460 [ 448.688050][T12293] ? __virt_addr_valid+0x21b/0x2d0 [ 448.693166][T12293] ? check_heap_object+0x13c/0x310 [ 448.698284][T12293] ? 0xffffffff81000000 [ 448.702433][T12293] ? __check_object_size+0x15a/0x210 [ 448.707806][T12293] file_tty_write+0x562/0x960 [ 448.712481][T12293] ? n_tty_read+0x1c90/0x1c90 [ 448.717158][T12293] vfs_write+0xa22/0xd40 [ 448.721487][T12293] ? __lock_acquire+0x1f80/0x1f80 [ 448.726554][T12293] ? file_end_write+0x230/0x230 [ 448.731403][T12293] ? __fget_files+0x3d0/0x440 [ 448.736079][T12293] ? __fdget_pos+0x1d7/0x2e0 [ 448.740666][T12293] ? ksys_write+0x77/0x2c0 [ 448.745074][T12293] ksys_write+0x19b/0x2c0 [ 448.749393][T12293] ? print_irqtrace_events+0x220/0x220 [ 448.754847][T12293] ? __ia32_sys_read+0x80/0x80 [ 448.759609][T12293] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 448.765587][T12293] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 448.771561][T12293] do_syscall_64+0x2b/0x70 [ 448.775978][T12293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 448.781876][T12293] RIP: 0033:0x7f802a0890e9 [ 448.786284][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 448.805892][T12293] RSP: 002b:00007f8028ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.814300][T12293] RAX: ffffffffffffffda RBX: 00007f802a19bf60 RCX: 00007f802a0890e9 [ 448.822297][T12293] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 448.830262][T12293] RBP: 00007f8028ffe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 448.838227][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.846189][T12293] R13: 00007ffea4c4a09f R14: 00007f8028ffe300 R15: 0000000000022000 [ 448.854171][T12293] [ 448.858703][ T6] usb 5-1: device descriptor read/64, error 18 [ 449.133315][ T6] usb 5-1: new high-speed USB device number 79 using dummy_hcd 01:52:36 executing program 0: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f"], 0x0) (async) r0 = syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x101, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x10, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1edd71a2a8"}, {0x5, 0x24, 0x0, 0xe441}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x2, 0xff}, {0x6, 0x24, 0x1a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x418, 0xff, 0x40, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x0, 0xce}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0x0, 0xc3, 0x10, 0x8}, 0x101, &(0x7f0000000100)={0x5, 0xf, 0x101, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x7, 0x8001}, @generic={0xb4, 0x10, 0xb, "79033eacdbe5d92b6b715f0873969c1f4aa86b45b1b9224f4f0abddfa4374e0f677d2950ad4cef8f018feddc65b6ef16093da18d13b100895cc9c47f15e71d82046428620c65606da7733a9c440a4edf68ae184c35891a3fab2f30ec88ff1ae07e0761411ed3116fb82b77e40a11f6cd3b35bf2167fbdd4232bc205186517782f942bef7a7c5d87959bafd1f557ec67e1cae46e69ca27abce057bd3f6840d42a153abfb18ec741eba70a8f210c7f59676f"}, @ptm_cap={0x3}, @generic={0x30, 0x10, 0x1, "f3485fc8013b8477da15cbe6b25d6c89b2e200f40336a3234785330d352a2d973bba3729c9461fbb4f1bee646a"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x3f, 0x3, 0x6, 0x39}]}, 0x9, [{0x2b, &(0x7f0000000240)=@string={0x2b, 0x3, "fbfb6ab7c517ece765fa4d24e8aedf20afb4b1aac99ce4305e284775a1e1c45579132fc53bc50de845"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xff, &(0x7f0000000300)=@string={0xff, 0x3, "e8cafd672175e534c1982f10d569d8a242391a2d6554f7b5a5a9be98260dc8d7334cf9db3b81dea25032fbe31262863b48a637048cb5e75a1ad9cf5227da9efc7b75c6c7cce87953d12b7063c21a2b7bdee5053332759b6dba8d3c16abfc5154448c781f74b4d818b5d651ed0222f257c460abf8c552c83da1d980f49a1b7d71e978e1f5b83f876af0f055749eb8aee48afe52712447ddfcc8dc4433254757cdc3c158ff349fd08625a21c49b2f4f53276a8acf2233c88b5a11b5906fdf467baa74045dc36e04036bb0cc7afacfbf22d6207ad0ee6a2e94110519e9afb70a253ad417ed8e1d83231f6f8bb421bf150020b07cf6783c23fa8056f75c9de"}}, {0xff, &(0x7f0000000400)=@string={0xff, 0x3, "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"}}, {0x66, &(0x7f0000000500)=@string={0x66, 0x3, "6c3a1fd0cea34cb0fc347589a43c016308978dd266f78086e083a91ec3c2a3931adcbd64d370a8f2f9d3a1d53b537b496b43dc08b0e60672caea245456e692442c7bbd0c4fe01595252f85b787c9f55781662b2483f198f34c97ce9a78000986f6493d35"}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "f7e7f7be6ac18df818b0ba988e8e7fc898be98beebdfb69a5650143cc2343b0020e7ce54bc71fad0e7c1724fd89819f1fe125160d2ccb1591940a8b13dccd22cda04e62213d852e165f6a086ebbc685933060703963a2a2d7fd886942dab64177be513651ff3158ffd3540a608e8f158a234ceeadeccd6f91af276579c5524d48e73819815fdcb95a012a7494ff47968436be8286c57aa31e08353d39495110876d3797e6d2348caec8f77a88670bea5b7fa29dc444c7c47403e77ce08220348358d7e9c4c26c951a2007fa7a6e4c2478cf4444329e895fa214c1c0f39a6dec2b4e6db"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x40, 0x24, 0xc3, {0xc3, 0x23, "1ca252e61e99d3ef04b9e35401f2dcb53563d4b9dfadec718180ef4ca7bf23502f4ef208c4bcb681db9fd84429a54a1361af054767edf77c4fb6231019a9b16743689f5c5bd92069685aef0fb3e5bac0cb6576f1c49e4705cf895cf5bb00e4291bb36d37b540c0ddf76a9c32e9398248663db9b8d6494c65b4bde62a93dccf640b1f27701e49b852dc72fe58cc66a1850a7b05f12e8fc08a90a9256b11d373f5acdec721b80e039c9849625a23f4f9ea9aa7325128b9b8ca5bbec05d1e58572567"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000900)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x8, 0x7f, 0x20, "02cae4ae", "7d25d4ff"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x0, 0x1, 0x84, 0x5, 0x800, 0x3}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x20, 0x0, 0xc2, "8c47fbc67d8a70b750024af1c87a3266f5bf71a947a58635854df138738e2b80eeda4fd5cfcbe978fa9fe85322a1d2a7bc0365407f01bc69a9e252225d9fc6cdc510abccb17e352703eadc4e029e5e17dbbd54be7de7069223d10b90d419ba9ed7320a21519d22aeb389be0abeb48c56001c91ef20c4ddebd9c9378a60041a3fd184a66a87a71e5457d3948660107b658ec545da7bf84219f14e37e68a30c6f5c6719fda0d4fb99b47e126eff87064a6b2b5c18d251045d810548baaf5680e33275b"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x400, 0x2}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "5ea7"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d40)={0x40, 0x17, 0x6}, &(0x7f0000000d80)={0x40, 0x19, 0x2, '>a'}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x3f}}) 01:52:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:36 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 01:52:36 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) (fail_nth: 4) 01:52:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) (fail_nth: 3) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 449.287624][T12299] FAULT_INJECTION: forcing a failure. [ 449.287624][T12299] name failslab, interval 1, probability 0, space 0, times 0 [ 449.323449][ T6] usb 5-1: device descriptor read/64, error 18 [ 449.330742][T12299] CPU: 1 PID: 12299 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 449.341394][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.343037][T12304] UDC core: couldn't find an available UDC or it's busy: -16 [ 449.351468][T12299] Call Trace: [ 449.351482][T12299] [ 449.351491][T12299] dump_stack_lvl+0x1e3/0x2cb [ 449.351523][T12299] ? bfq_pos_tree_add_move+0x436/0x436 [ 449.351546][T12299] ? panic+0x76e/0x76e [ 449.351568][T12299] ? __might_sleep+0xc0/0xc0 01:52:36 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 449.351594][T12299] should_fail+0x384/0x4b0 [ 449.362131][T12300] FAULT_INJECTION: forcing a failure. [ 449.362131][T12300] name failslab, interval 1, probability 0, space 0, times 0 [ 449.362380][T12300] [ 449.362385][T12300] ====================================================== [ 449.362390][T12300] WARNING: possible circular locking dependency detected [ 449.362396][T12300] 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 Not tainted [ 449.362406][T12300] ------------------------------------------------------ [ 449.362410][T12300] syz-executor.5/12300 is trying to acquire lock: [ 449.362419][T12300] ffffffff8cb0f4a0 (console_owner){....}-{0:0}, at: console_trylock_spinning+0x1e2/0x450 [ 449.362460][T12300] [ 449.362460][T12300] but task is already holding lock: [ 449.362464][T12300] ffff8880794d5958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xc5/0x170 [ 449.362496][T12300] [ 449.362496][T12300] which lock already depends on the new lock. [ 449.362496][T12300] [ 449.362501][T12300] [ 449.362501][T12300] the existing dependency chain (in reverse order) is: [ 449.362505][T12300] [ 449.362505][T12300] -> #2 (&port->lock){-.-.}-{2:2}: [ 449.362524][T12300] lock_acquire+0x1a7/0x400 [ 449.362538][T12300] _raw_spin_lock_irqsave+0xd1/0x120 [ 449.362553][T12300] tty_port_default_wakeup+0x21/0x100 [ 449.362569][T12300] serial8250_tx_chars+0x60e/0x810 [ 449.362665][T12300] serial8250_handle_irq+0x32f/0x410 [ 449.362683][T12300] serial8250_default_handle_irq+0xaf/0x190 [ 449.362697][T12300] serial8250_interrupt+0xa3/0x1e0 [ 449.362713][T12300] __handle_irq_event_percpu+0x200/0x620 [ 449.362760][T12300] handle_irq_event+0x83/0x1e0 [ 449.362775][T12300] handle_edge_irq+0x245/0xbe0 [ 449.362788][T12300] __common_interrupt+0xce/0x1e0 [ 449.362840][T12300] common_interrupt+0x9f/0xc0 [ 449.362855][T12300] asm_common_interrupt+0x1e/0x40 [ 449.362869][T12300] acpi_idle_enter+0x42d/0x790 [ 449.362911][T12300] cpuidle_enter_state+0x517/0xed0 [ 449.362956][T12300] cpuidle_enter+0x59/0x90 [ 449.362969][T12300] do_idle+0x3d2/0x640 [ 449.363017][T12300] cpu_startup_entry+0x15/0x20 [ 449.363031][T12300] rest_init+0x24f/0x270 [ 449.363045][T12300] start_kernel+0x0/0x56e [ 449.363090][T12300] start_kernel+0x4bf/0x56e [ 449.363103][T12300] secondary_startup_64_no_verify+0xc4/0xcb [ 449.363128][T12300] [ 449.363128][T12300] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 449.363155][T12300] lock_acquire+0x1a7/0x400 [ 449.363168][T12300] _raw_spin_lock_irqsave+0xd1/0x120 [ 449.363183][T12300] serial8250_console_write+0x19c/0xf60 [ 449.363196][T12300] console_unlock+0xa98/0x1150 [ 449.363210][T12300] vprintk_emit+0xd1/0x1e0 [ 449.363224][T12300] _printk+0xcf/0x10f [ 449.363237][T12300] register_console+0x6e2/0x9c0 [ 449.363251][T12300] univ8250_console_init+0x41/0x43 [ 449.363272][T12300] console_init+0x5d/0xa8 [ 449.363286][T12300] start_kernel+0x328/0x56e [ 449.363299][T12300] secondary_startup_64_no_verify+0xc4/0xcb [ 449.363314][T12300] [ 449.363314][T12300] -> #0 (console_owner){....}-{0:0}: [ 449.363333][T12300] validate_chain+0x185c/0x65c0 [ 449.363347][T12300] __lock_acquire+0x129a/0x1f80 [ 449.363359][T12300] lock_acquire+0x1a7/0x400 [ 449.363371][T12300] console_trylock_spinning+0x202/0x450 [ 449.363386][T12300] vprintk_emit+0xb8/0x1e0 [ 449.363398][T12300] _printk+0xcf/0x10f [ 449.363410][T12300] should_fail+0x366/0x4b0 [ 449.363425][T12300] should_failslab+0x5/0x20 [ 449.363441][T12300] __kmalloc+0x8b/0x370 [ 449.363454][T12300] __tty_buffer_request_room+0x1f0/0x540 [ 449.363470][T12300] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 449.363487][T12300] pty_write+0xe9/0x170 [ 449.363498][T12300] n_tty_write+0xe4f/0x13b0 [ 449.363512][T12300] file_tty_write+0x5a5/0x960 [ 449.363524][T12300] vfs_write+0xa22/0xd40 [ 449.363536][T12300] ksys_write+0x19b/0x2c0 [ 449.363548][T12300] do_syscall_64+0x2b/0x70 [ 449.363561][T12300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 449.363575][T12300] [ 449.363575][T12300] other info that might help us debug this: [ 449.363575][T12300] [ 449.363580][T12300] Chain exists of: [ 449.363580][T12300] console_owner --> &port_lock_key --> &port->lock [ 449.363580][T12300] [ 449.363601][T12300] Possible unsafe locking scenario: [ 449.363601][T12300] [ 449.363604][T12300] CPU0 CPU1 [ 449.363608][T12300] ---- ---- [ 449.363611][T12300] lock(&port->lock); [ 449.363619][T12300] lock(&port_lock_key); [ 449.363629][T12300] lock(&port->lock); [ 449.363638][T12300] lock(console_owner); [ 449.363645][T12300] [ 449.363645][T12300] *** DEADLOCK *** [ 449.363645][T12300] [ 449.363648][T12300] 5 locks held by syz-executor.5/12300: [ 449.363658][T12300] #0: ffff888074c8e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 449.363694][T12300] #1: ffff888074c8e130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x26e/0x960 [ 449.363728][T12300] #2: ffff888074c8e2e8 (&o_tty->termios_rwsem/1){++++}-{3:3}, at: n_tty_write+0x1100/0x13b0 [ 449.363767][T12300] #3: ffffc900031bf378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x707/0x13b0 [ 449.363802][T12300] #4: ffff8880794d5958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xc5/0x170 [ 449.363834][T12300] [ 449.363834][T12300] stack backtrace: [ 449.365165][T12299] ? security_inode_alloc+0x24/0x130 [ 449.365233][T12299] should_failslab+0x5/0x20 [ 449.365251][T12299] kmem_cache_alloc+0x69/0x2f0 [ 449.365268][T12299] security_inode_alloc+0x24/0x130 [ 449.365283][T12299] inode_init_always+0x3e2/0xa50 [ 449.365300][T12299] ? shmem_match+0x150/0x150 [ 449.365317][T12299] new_inode_pseudo+0x98/0x210 [ 449.365333][T12299] new_inode+0x25/0x1d0 [ 449.365347][T12299] ? do_raw_spin_unlock+0x134/0x8a0 [ 449.365364][T12299] shmem_get_inode+0x2ff/0xae0 [ 449.365382][T12299] __shmem_file_setup+0x11e/0x270 [ 449.365419][T12299] __se_sys_memfd_create+0x1d5/0x450 [ 449.365436][T12299] do_syscall_64+0x2b/0x70 [ 449.365450][T12299] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 449.365466][T12299] RIP: 0033:0x7eff7b8890e9 [ 449.365480][T12299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 449.365493][T12299] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 449.365510][T12299] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890e9 [ 449.365521][T12299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007eff7b8e21ee [ 449.365530][T12299] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 449.365539][T12299] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 449.365549][T12299] R13: 00007ffe2267071f R14: 0000000008100000 R15: 0000000000022000 [ 449.365564][T12299] [ 449.365571][T12300] CPU: 0 PID: 12300 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 449.365589][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.365598][T12300] Call Trace: [ 449.365603][T12300] [ 449.365609][T12300] dump_stack_lvl+0x1e3/0x2cb [ 449.365629][T12300] ? bfq_pos_tree_add_move+0x436/0x436 [ 449.365648][T12300] ? print_circular_bug+0x13e/0x1c0 [ 449.365663][T12300] check_noncircular+0x2f7/0x3b0 [ 449.365679][T12300] ? add_chain_block+0x850/0x850 [ 449.365693][T12300] ? lockdep_lock+0x11d/0x2a0 [ 449.365710][T12300] validate_chain+0x185c/0x65c0 [ 449.365732][T12300] ? reacquire_held_locks+0x680/0x680 [ 449.365747][T12300] ? reacquire_held_locks+0x680/0x680 [ 449.365760][T12300] ? mark_lock+0x98/0x350 [ 449.365774][T12300] ? down_trylock+0x51/0x90 [ 449.365790][T12300] ? rcu_read_lock_sched_held+0x89/0x130 [ 449.365847][T12300] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 449.365875][T12300] ? mark_lock+0x98/0x350 [ 449.365893][T12300] __lock_acquire+0x129a/0x1f80 [ 449.365911][T12300] lock_acquire+0x1a7/0x400 [ 449.365923][T12300] ? console_trylock_spinning+0x1e2/0x450 [ 449.365939][T12300] ? read_lock_is_recursive+0x10/0x10 [ 449.365953][T12300] ? __lock_acquire+0x1f80/0x1f80 [ 449.365966][T12300] ? do_raw_spin_lock+0x148/0x360 [ 449.365985][T12300] ? do_raw_spin_unlock+0x134/0x8a0 [ 449.366004][T12300] console_trylock_spinning+0x202/0x450 [ 449.366019][T12300] ? console_trylock_spinning+0x1e2/0x450 [ 449.366034][T12300] ? vprintk_emit+0x1e0/0x1e0 [ 449.366048][T12300] ? register_lock_class+0xfe/0x9d0 [ 449.366064][T12300] ? is_dynamic_key+0x1f0/0x1f0 [ 449.366080][T12300] vprintk_emit+0xb8/0x1e0 [ 449.366096][T12300] _printk+0xcf/0x10f [ 449.366113][T12300] ? panic+0x76e/0x76e [ 449.366133][T12300] should_fail+0x366/0x4b0 [ 449.366278][T12300] ? __tty_buffer_request_room+0x1f0/0x540 [ 449.366298][T12300] should_failslab+0x5/0x20 [ 449.366315][T12300] __kmalloc+0x8b/0x370 [ 449.366334][T12300] __tty_buffer_request_room+0x1f0/0x540 [ 449.366354][T12300] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 449.366372][T12300] ? up_read+0x20/0x20 [ 449.366389][T12300] pty_write+0xe9/0x170 [ 449.366405][T12300] n_tty_write+0xe4f/0x13b0 [ 449.366424][T12300] ? n_tty_read+0x1c90/0x1c90 [ 449.366438][T12300] ? wait_woken+0x1b0/0x1b0 [ 449.366452][T12300] ? check_heap_object+0x13c/0x310 [ 449.366468][T12300] ? 0xffffffff81000000 [ 449.366478][T12300] ? __check_object_size+0x15a/0x210 [ 449.366494][T12300] file_tty_write+0x5a5/0x960 [ 449.366510][T12300] ? n_tty_read+0x1c90/0x1c90 [ 449.366524][T12300] vfs_write+0xa22/0xd40 [ 449.366538][T12300] ? __lock_acquire+0x1f80/0x1f80 [ 449.366556][T12300] ? file_end_write+0x230/0x230 [ 449.366573][T12300] ? __fget_files+0x3d0/0x440 [ 449.366592][T12300] ? __fdget_pos+0x1d7/0x2e0 [ 449.366604][T12300] ? ksys_write+0x77/0x2c0 [ 449.366618][T12300] ksys_write+0x19b/0x2c0 [ 449.366632][T12300] ? print_irqtrace_events+0x220/0x220 [ 449.366648][T12300] ? __ia32_sys_read+0x80/0x80 [ 449.366663][T12300] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 449.366682][T12300] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 449.366703][T12300] do_syscall_64+0x2b/0x70 [ 449.366718][T12300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 449.366735][T12300] RIP: 0033:0x7f802a0890e9 [ 449.366748][T12300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 449.366761][T12300] RSP: 002b:00007f8028ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.366779][T12300] RAX: ffffffffffffffda RBX: 00007f802a19bf60 RCX: 00007f802a0890e9 [ 449.366790][T12300] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 449.366801][T12300] RBP: 00007f8028ffe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 449.366811][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.366821][T12300] R13: 00007ffea4c4a09f R14: 00007f8028ffe300 R15: 0000000000022000 [ 449.366837][T12300] [ 449.393710][T12304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 449.402551][T12300] CPU: 0 PID: 12300 Comm: syz-executor.5 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 450.459135][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.469184][T12300] Call Trace: [ 450.472455][T12300] [ 450.475378][T12300] dump_stack_lvl+0x1e3/0x2cb [ 450.480050][T12300] ? bfq_pos_tree_add_move+0x436/0x436 [ 450.485626][T12300] ? panic+0x76e/0x76e [ 450.489688][T12300] should_fail+0x384/0x4b0 [ 450.494102][T12300] ? __tty_buffer_request_room+0x1f0/0x540 [ 450.499917][T12300] should_failslab+0x5/0x20 [ 450.504408][T12300] __kmalloc+0x8b/0x370 [ 450.508564][T12300] __tty_buffer_request_room+0x1f0/0x540 [ 450.514296][T12300] tty_insert_flip_string_fixed_flag+0x91/0x2c0 [ 450.520527][T12300] ? up_read+0x20/0x20 [ 450.524587][T12300] pty_write+0xe9/0x170 [ 450.528730][T12300] n_tty_write+0xe4f/0x13b0 [ 450.533230][T12300] ? n_tty_read+0x1c90/0x1c90 [ 450.537891][T12300] ? wait_woken+0x1b0/0x1b0 [ 450.542381][T12300] ? check_heap_object+0x13c/0x310 [ 450.547490][T12300] ? 0xffffffff81000000 [ 450.551630][T12300] ? __check_object_size+0x15a/0x210 [ 450.556907][T12300] file_tty_write+0x5a5/0x960 [ 450.561571][T12300] ? n_tty_read+0x1c90/0x1c90 [ 450.566246][T12300] vfs_write+0xa22/0xd40 [ 450.570478][T12300] ? __lock_acquire+0x1f80/0x1f80 [ 450.575488][T12300] ? file_end_write+0x230/0x230 [ 450.580335][T12300] ? __fget_files+0x3d0/0x440 [ 450.584999][T12300] ? __fdget_pos+0x1d7/0x2e0 [ 450.589576][T12300] ? ksys_write+0x77/0x2c0 [ 450.594017][T12300] ksys_write+0x19b/0x2c0 [ 450.598335][T12300] ? print_irqtrace_events+0x220/0x220 [ 450.603778][T12300] ? __ia32_sys_read+0x80/0x80 [ 450.608535][T12300] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 450.614503][T12300] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 450.620468][T12300] do_syscall_64+0x2b/0x70 [ 450.624871][T12300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 450.630749][T12300] RIP: 0033:0x7f802a0890e9 [ 450.635151][T12300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 450.654739][T12300] RSP: 002b:00007f8028ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.663140][T12300] RAX: ffffffffffffffda RBX: 00007f802a19bf60 RCX: 00007f802a0890e9 [ 450.671103][T12300] RDX: 00000000ffffffde RSI: 00000000200001c0 RDI: 0000000000000003 [ 450.679066][T12300] RBP: 00007f8028ffe1d0 R08: 0000000000000000 R09: 0000000000000000 01:52:38 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) (fail_nth: 5) 01:52:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:38 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 450.687025][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.694985][T12300] R13: 00007ffea4c4a09f R14: 00007f8028ffe300 R15: 0000000000022000 [ 450.702952][T12300] [ 450.718304][ T6] usb usb5-port1: attempt power cycle [ 450.768625][T12314] FAULT_INJECTION: forcing a failure. [ 450.768625][T12314] name failslab, interval 1, probability 0, space 0, times 0 [ 450.796376][T12314] CPU: 0 PID: 12314 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 450.806914][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.816960][T12314] Call Trace: [ 450.820227][T12314] [ 450.823152][T12314] dump_stack_lvl+0x1e3/0x2cb [ 450.827841][T12314] ? bfq_pos_tree_add_move+0x436/0x436 [ 450.833299][T12314] ? panic+0x76e/0x76e [ 450.837361][T12314] ? __rwlock_init+0x40/0x140 [ 450.842035][T12314] should_fail+0x384/0x4b0 [ 450.846462][T12314] ? __d_alloc+0x31/0x700 [ 450.850795][T12314] should_failslab+0x5/0x20 [ 450.855291][T12314] kmem_cache_alloc_lru+0x75/0x2d0 [ 450.860409][T12314] ? __lock_acquire+0x1f80/0x1f80 [ 450.865423][T12314] __d_alloc+0x31/0x700 [ 450.869567][T12314] d_alloc_pseudo+0x19/0x70 [ 450.874067][T12314] alloc_file_pseudo+0x137/0x300 [ 450.879010][T12314] ? alloc_empty_file_noaccount+0x70/0x70 [ 450.884715][T12314] ? shmem_get_inode+0x912/0xae0 [ 450.889639][T12314] __shmem_file_setup+0x194/0x270 [ 450.894649][T12314] __se_sys_memfd_create+0x1d5/0x450 [ 450.899918][T12314] do_syscall_64+0x2b/0x70 [ 450.904318][T12314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 450.910200][T12314] RIP: 0033:0x7eff7b8890e9 [ 450.914619][T12314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 450.934226][T12314] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 450.942636][T12314] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890e9 [ 450.950598][T12314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007eff7b8e21ee [ 450.958558][T12314] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 450.966521][T12314] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 450.974498][T12314] R13: 00007ffe2267071f R14: 0000000008100000 R15: 0000000000022000 [ 450.982460][T12314] 01:52:38 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:52:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 451.133233][ T3673] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 451.205510][ T6] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 451.323423][ T3673] usb 1-1: device descriptor read/64, error 18 [ 451.363359][ T6] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 451.563371][ T6] usb 5-1: device descriptor read/8, error -61 [ 451.593263][ T3673] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 451.683352][ T6] usb usb5-port1: unable to enumerate USB device [ 451.783233][ T3673] usb 1-1: device descriptor read/64, error 18 [ 451.903760][ T3673] usb usb1-port1: attempt power cycle 01:52:39 executing program 0: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f"], 0x0) (async) r0 = syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x101, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x10, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1edd71a2a8"}, {0x5, 0x24, 0x0, 0xe441}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x2, 0xff}, {0x6, 0x24, 0x1a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x418, 0xff, 0x40, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x0, 0xce}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x9, 0x0, 0xc3, 0x10, 0x8}, 0x101, &(0x7f0000000100)={0x5, 0xf, 0x101, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x7, 0x8001}, @generic={0xb4, 0x10, 0xb, "79033eacdbe5d92b6b715f0873969c1f4aa86b45b1b9224f4f0abddfa4374e0f677d2950ad4cef8f018feddc65b6ef16093da18d13b100895cc9c47f15e71d82046428620c65606da7733a9c440a4edf68ae184c35891a3fab2f30ec88ff1ae07e0761411ed3116fb82b77e40a11f6cd3b35bf2167fbdd4232bc205186517782f942bef7a7c5d87959bafd1f557ec67e1cae46e69ca27abce057bd3f6840d42a153abfb18ec741eba70a8f210c7f59676f"}, @ptm_cap={0x3}, @generic={0x30, 0x10, 0x1, "f3485fc8013b8477da15cbe6b25d6c89b2e200f40336a3234785330d352a2d973bba3729c9461fbb4f1bee646a"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x3f, 0x3, 0x6, 0x39}]}, 0x9, [{0x2b, &(0x7f0000000240)=@string={0x2b, 0x3, "fbfb6ab7c517ece765fa4d24e8aedf20afb4b1aac99ce4305e284775a1e1c45579132fc53bc50de845"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xff, &(0x7f0000000300)=@string={0xff, 0x3, "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"}}, {0xff, &(0x7f0000000400)=@string={0xff, 0x3, "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"}}, {0x66, &(0x7f0000000500)=@string={0x66, 0x3, "6c3a1fd0cea34cb0fc347589a43c016308978dd266f78086e083a91ec3c2a3931adcbd64d370a8f2f9d3a1d53b537b496b43dc08b0e60672caea245456e692442c7bbd0c4fe01595252f85b787c9f55781662b2483f198f34c97ce9a78000986f6493d35"}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "f7e7f7be6ac18df818b0ba988e8e7fc898be98beebdfb69a5650143cc2343b0020e7ce54bc71fad0e7c1724fd89819f1fe125160d2ccb1591940a8b13dccd22cda04e62213d852e165f6a086ebbc685933060703963a2a2d7fd886942dab64177be513651ff3158ffd3540a608e8f158a234ceeadeccd6f91af276579c5524d48e73819815fdcb95a012a7494ff47968436be8286c57aa31e08353d39495110876d3797e6d2348caec8f77a88670bea5b7fa29dc444c7c47403e77ce08220348358d7e9c4c26c951a2007fa7a6e4c2478cf4444329e895fa214c1c0f39a6dec2b4e6db"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x40, 0x24, 0xc3, {0xc3, 0x23, "1ca252e61e99d3ef04b9e35401f2dcb53563d4b9dfadec718180ef4ca7bf23502f4ef208c4bcb681db9fd84429a54a1361af054767edf77c4fb6231019a9b16743689f5c5bd92069685aef0fb3e5bac0cb6576f1c49e4705cf895cf5bb00e4291bb36d37b540c0ddf76a9c32e9398248663db9b8d6494c65b4bde62a93dccf640b1f27701e49b852dc72fe58cc66a1850a7b05f12e8fc08a90a9256b11d373f5acdec721b80e039c9849625a23f4f9ea9aa7325128b9b8ca5bbec05d1e58572567"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000900)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x8, 0x7f, 0x20, "02cae4ae", "7d25d4ff"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x0, 0x1, 0x84, 0x5, 0x800, 0x3}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x20, 0x0, 0xc2, "8c47fbc67d8a70b750024af1c87a3266f5bf71a947a58635854df138738e2b80eeda4fd5cfcbe978fa9fe85322a1d2a7bc0365407f01bc69a9e252225d9fc6cdc510abccb17e352703eadc4e029e5e17dbbd54be7de7069223d10b90d419ba9ed7320a21519d22aeb389be0abeb48c56001c91ef20c4ddebd9c9378a60041a3fd184a66a87a71e5457d3948660107b658ec545da7bf84219f14e37e68a30c6f5c6719fda0d4fb99b47e126eff87064a6b2b5c18d251045d810548baaf5680e33275b"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x400, 0x2}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "5ea7"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d40)={0x40, 0x17, 0x6}, &(0x7f0000000d80)={0x40, 0x19, 0x2, '>a'}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x3f}}) 01:52:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:39 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) (fail_nth: 6) 01:52:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 452.313319][ T3673] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 452.319584][T12331] FAULT_INJECTION: forcing a failure. [ 452.319584][T12331] name failslab, interval 1, probability 0, space 0, times 0 [ 452.351461][T12335] UDC core: couldn't find an available UDC or it's busy: -16 01:52:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 452.360747][T12335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 452.369448][T12331] CPU: 1 PID: 12331 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 452.380059][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.390128][T12331] Call Trace: [ 452.393410][T12331] [ 452.396347][T12331] dump_stack_lvl+0x1e3/0x2cb [ 452.401047][T12331] ? bfq_pos_tree_add_move+0x436/0x436 [ 452.406501][T12331] ? panic+0x76e/0x76e [ 452.410567][T12331] ? __might_sleep+0xc0/0xc0 [ 452.415146][T12331] ? __d_instantiate+0x194/0x720 [ 452.420077][T12331] should_fail+0x384/0x4b0 [ 452.424485][T12331] ? __alloc_file+0x26/0x230 [ 452.429065][T12331] should_failslab+0x5/0x20 [ 452.433566][T12331] kmem_cache_alloc+0x69/0x2f0 [ 452.438322][T12331] ? __lock_acquire+0x1f80/0x1f80 [ 452.443425][T12331] ? do_raw_spin_lock+0x148/0x360 [ 452.448443][T12331] __alloc_file+0x26/0x230 [ 452.452848][T12331] alloc_empty_file+0xa9/0x1b0 [ 452.457612][T12331] alloc_file+0x58/0x4e0 [ 452.461868][T12331] alloc_file_pseudo+0x260/0x300 [ 452.466814][T12331] ? alloc_empty_file_noaccount+0x70/0x70 [ 452.472539][T12331] ? shmem_get_inode+0x912/0xae0 [ 452.477481][T12331] __shmem_file_setup+0x194/0x270 [ 452.482506][T12331] __se_sys_memfd_create+0x1d5/0x450 [ 452.487798][T12331] do_syscall_64+0x2b/0x70 [ 452.492208][T12331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 452.498098][T12331] RIP: 0033:0x7eff7b8890e9 [ 452.502506][T12331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 452.522188][T12331] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 452.530592][T12331] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890e9 [ 452.538557][T12331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007eff7b8e21ee [ 452.546514][T12331] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 452.554469][T12331] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 01:52:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x9}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:40 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) (fail_nth: 7) [ 452.562426][T12331] R13: 00007ffe2267071f R14: 0000000008100000 R15: 0000000000022000 [ 452.570418][T12331] [ 452.613209][ T3673] usb 1-1: device not accepting address 8, error -71 [ 452.630979][T12343] FAULT_INJECTION: forcing a failure. [ 452.630979][T12343] name failslab, interval 1, probability 0, space 0, times 0 [ 452.645188][T12343] CPU: 0 PID: 12343 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 452.655705][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.665747][T12343] Call Trace: [ 452.669009][T12343] [ 452.671923][T12343] dump_stack_lvl+0x1e3/0x2cb [ 452.676593][T12343] ? bfq_pos_tree_add_move+0x436/0x436 [ 452.682043][T12343] ? panic+0x76e/0x76e [ 452.686114][T12343] ? __might_sleep+0xc0/0xc0 [ 452.690687][T12343] ? __lock_acquire+0x1f80/0x1f80 [ 452.695820][T12343] should_fail+0x384/0x4b0 [ 452.700229][T12343] ? security_file_alloc+0x24/0x140 [ 452.705431][T12343] should_failslab+0x5/0x20 [ 452.709920][T12343] kmem_cache_alloc+0x69/0x2f0 [ 452.714676][T12343] ? __alloc_file+0x26/0x230 [ 452.719248][T12343] security_file_alloc+0x24/0x140 [ 452.724257][T12343] __alloc_file+0xc2/0x230 [ 452.728770][T12343] alloc_empty_file+0xa9/0x1b0 [ 452.733524][T12343] alloc_file+0x58/0x4e0 [ 452.737747][T12343] alloc_file_pseudo+0x260/0x300 [ 452.742668][T12343] ? alloc_empty_file_noaccount+0x70/0x70 [ 452.748366][T12343] ? shmem_get_inode+0x912/0xae0 [ 452.753291][T12343] __shmem_file_setup+0x194/0x270 [ 452.758431][T12343] __se_sys_memfd_create+0x1d5/0x450 [ 452.763699][T12343] do_syscall_64+0x2b/0x70 [ 452.768097][T12343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 452.773972][T12343] RIP: 0033:0x7eff7b8890e9 [ 452.778372][T12343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 452.797956][T12343] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 452.806351][T12343] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890e9 [ 452.814305][T12343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007eff7b8e21ee [ 452.822264][T12343] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 452.830215][T12343] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 452.838167][T12343] R13: 00007ffe2267071f R14: 0000000008100000 R15: 0000000000022000 [ 452.846128][T12343] [ 453.153256][ T3673] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 453.253474][ T3673] usb 1-1: Invalid ep0 maxpacket: 0 [ 453.258830][ T3673] usb usb1-port1: unable to enumerate USB device 01:52:41 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:52:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 454.643281][ T3677] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 454.833238][ T3677] usb 5-1: device descriptor read/64, error 18 [ 455.103251][ T3677] usb 5-1: new high-speed USB device number 83 using dummy_hcd 01:52:42 executing program 0: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000050902ad4c72ca0000000903e50003fe03010009058d1f"], 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xc5, 0x21, 0x82, 0x40, 0xbb4, 0xa09, 0xd63b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0xff, 0x6, 0x40, 0x80, [{{0x9, 0x4, 0x1e, 0x20, 0x3, 0x11, 0x45, 0x86, 0x7, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x0, "b6"}]}], [{{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3f, 0x400}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x41}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x9, 0x2, 0x2}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7f, 0x6b, 0x8, 0xff}, 0x101, &(0x7f0000000100)={0x5, 0xf, 0x101, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x7f, 0x7, 0x401, 0x44}, @wireless={0xb, 0x10, 0x1, 0xc, 0x94, 0x3, 0x0, 0x7}, @generic={0xbe, 0x10, 0xa, "4bdac2e32e9893a52bea22468564f9bdfb2f9bec41300c57abcc7ea4ea753010802ee56ee2a1a839eba6f884f974621598b14a4591d6680ad4f76b212863ca3f6e20ccc177c74120bbe55e3484270236c2fc06f183a97ae8195d4325f2f4cefd8265e01b1bbbcf739dfc2296cdd0408f7252b1518131413cf8ec688eb88213c5e9ce9afa40e0bce406f718be6c09bb2db48b689a3a27006fec446625bfb3d5142ee9a6af5034842269bf695ff6ea45b5923af9af8190bd2ce237ba"}, @ss_cap={0xa, 0x10, 0x3, 0x9036339ed30b8f6e, 0x8, 0x80, 0x1, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "4f927951d3dbfb5dc3d4587228fe8506"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x11, 0x6c, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x541c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc01}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "4789987e6661508edd98717d34aab644bf2021b0cd9f7e8e9a74c7f088a9a7da37b4779d83dc6a2aabc658904367848323cf019a4d78a48a955e5457d30c54fd40f4cd9f1b893f05a3fcab20159b459a2a02682d2c86265bea9044ad9dad6d6f8b9c26ec27151babe0af4a539b534c9b76b5f96dd466b25138a29b8b648650005670219f693c6c1a54f04be65ed949cd548874398f02d9b4bb9ea2cc1b0b117da49ee697204c0c769a9950389d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}]}) 01:52:42 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="b0a255beeef1ec843bfac17dd9d9134150a7097909ee62554e4bab6d09f8eca6a47bc7cc0c2ee6fb549c951f790fbaf13cc9ab29f37b51e5874a897a0588b7ad2187d2d782313eec1d6745b564b697386adac15643686820f0ab4b0a07977ef3dde23b653a6d41a39a03fb60b739abc119e257639c474ddecb3aaec81fcb78f0d505e9e33b9ec9da3fbbdaa004e6c0d3243c4014b543b53a683976f1330e4acc0583866195e321e41d9f75c3a67576b964121e6a5f38f8464bc8ed12345968c7d9e189b5d4b723342bdc3c929851659e0186bcdd849ab3d82430b3ab91d16338528960fb28aff8834836443f6c2ec4f2da2e4f1d3fe7743855da86f963495d41cfef8c2bce4fddbd3104f9cec4ac6a1d57e170fc4293c0ab280f4f3c8acede0d47e9a3c8bc5b4e48a099a36121d37bfe41a59d64ed78bfa9e22475737aeb5ef4db266ceee07459cb457185355f8f35bff246b3353e792918908bcfaa2675f0e6247fab902a2f11f6ece46fd4bbe1154e40ec9489c24ea00573cc73c9a3bff05ea3a63dbec2fedd061a4d44e58d0d79220dd18d0c0527488ada15aadd2798c0331a882b0bb7a3f824a986a222bc1b70ed27821226e72a61d9ab0f89ca8443397ae0cfaf95847ff4db096a6cd100d1111384f79f3068d023", 0x1d7}]) (fail_nth: 8) 01:52:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0xa}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYRES32]) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:42 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 455.294981][ T3677] usb 5-1: device descriptor read/64, error 18 01:52:42 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 455.360230][T12360] FAULT_INJECTION: forcing a failure. [ 455.360230][T12360] name failslab, interval 1, probability 0, space 0, times 0 [ 455.412608][T12360] CPU: 0 PID: 12360 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 455.423149][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.433221][T12360] Call Trace: [ 455.436494][T12360] [ 455.439419][T12360] dump_stack_lvl+0x1e3/0x2cb [ 455.444119][T12360] ? bfq_pos_tree_add_move+0x436/0x436 [ 455.449589][T12360] ? panic+0x76e/0x76e [ 455.453735][T12360] ? __might_sleep+0xc0/0xc0 [ 455.458331][T12360] ? rcu_read_lock_sched_held+0x5f/0x130 [ 455.463952][T12360] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 455.469910][T12360] should_fail+0x384/0x4b0 [ 455.474315][T12360] ? tomoyo_realpath_from_path+0xd8/0x5f0 [ 455.480112][T12360] should_failslab+0x5/0x20 [ 455.484603][T12360] __kmalloc+0x8b/0x370 [ 455.488743][T12360] ? kfree+0x2f/0x210 [ 455.492710][T12360] ? __stack_depot_save+0x33/0x490 [ 455.497816][T12360] tomoyo_realpath_from_path+0xd8/0x5f0 [ 455.503533][T12360] tomoyo_path_perm+0x270/0x6b0 [ 455.508397][T12360] ? tomoyo_path_permission+0x360/0x360 [ 455.514048][T12360] ? trace_lock_acquire+0x56/0x180 [ 455.519154][T12360] ? __might_sleep+0xc0/0xc0 [ 455.523730][T12360] ? rcu_read_lock_any_held+0x5f/0x150 [ 455.529169][T12360] ? rcu_read_lock_bh_held+0x110/0x110 [ 455.534720][T12360] security_path_truncate+0xc0/0x140 [ 455.539991][T12360] do_sys_ftruncate+0x257/0x380 [ 455.544829][T12360] do_syscall_64+0x2b/0x70 [ 455.549232][T12360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 455.555115][T12360] RIP: 0033:0x7eff7b8890a7 [ 455.559516][T12360] Code: 48 89 e7 e8 cb e5 ff ff 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 1a 00 00 90 b8 4d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 455.579237][T12360] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 455.587632][T12360] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890a7 [ 455.595584][T12360] RDX: 0000000000000000 RSI: 0000000008100000 RDI: 0000000000000004 [ 455.603538][T12360] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 01:52:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0xd}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:43 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 455.611493][T12360] R10: 0000000000000002 R11: 0000000000000217 R12: 0000000000000004 [ 455.619553][T12360] R13: 0000000000000004 R14: 0000000008100000 R15: 0000000000022000 [ 455.627522][T12360] [ 455.636073][ T3677] usb usb5-port1: attempt power cycle 01:52:43 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 455.696430][T12360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.714392][T12360] loop2: detected capacity change from 0 to 264192 [ 455.863422][ T3676] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 456.053263][ T3677] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 456.123302][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 456.224983][ T3677] usb 5-1: device descriptor read/8, error -61 [ 456.263486][ T3676] usb 1-1: config index 0 descriptor too short (expected 19629, got 45) [ 456.271978][ T3676] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 456.281206][ T3676] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 456.291733][ T3676] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 456.384495][ T3676] usb 1-1: config index 1 descriptor too short (expected 19629, got 45) [ 456.392965][ T3676] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 456.402042][ T3676] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 456.412424][ T3676] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 456.493425][ T3677] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 456.494921][ T3676] usb 1-1: config index 2 descriptor too short (expected 19629, got 45) [ 456.509517][ T3676] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 456.518475][ T3676] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 456.528753][ T3676] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 456.613327][ T3676] usb 1-1: config index 3 descriptor too short (expected 19629, got 45) [ 456.621805][ T3676] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 456.631918][ T3676] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 456.642307][ T3676] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 456.674227][ T3677] usb 5-1: device descriptor read/8, error -61 [ 456.723338][ T3676] usb 1-1: config index 4 descriptor too short (expected 19629, got 45) [ 456.731787][ T3676] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 456.740867][ T3676] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 456.751438][ T3676] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 456.761000][ T3676] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.770244][ T3676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.793537][ T3677] usb usb5-port1: unable to enumerate USB device [ 457.018218][T12368] UDC core: couldn't find an available UDC or it's busy: -16 [ 457.025783][T12368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 457.034486][ T3677] usb 1-1: USB disconnect, device number 10 01:52:44 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 01:52:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:52:45 executing program 0: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000050902ad4c72ca0000000903e50003fe03010009058d1f"], 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xc5, 0x21, 0x82, 0x40, 0xbb4, 0xa09, 0xd63b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0xff, 0x6, 0x40, 0x80, [{{0x9, 0x4, 0x1e, 0x20, 0x3, 0x11, 0x45, 0x86, 0x7, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x0, "b6"}]}], [{{0x9, 0x5, 0x9, 0x2, 0x20, 0x0, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3f, 0x400}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x0, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x41}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x9, 0x2, 0x2}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7f, 0x6b, 0x8, 0xff}, 0x101, &(0x7f0000000100)={0x5, 0xf, 0x101, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x7f, 0x7, 0x401, 0x44}, @wireless={0xb, 0x10, 0x1, 0xc, 0x94, 0x3, 0x0, 0x7}, @generic={0xbe, 0x10, 0xa, "4bdac2e32e9893a52bea22468564f9bdfb2f9bec41300c57abcc7ea4ea753010802ee56ee2a1a839eba6f884f974621598b14a4591d6680ad4f76b212863ca3f6e20ccc177c74120bbe55e3484270236c2fc06f183a97ae8195d4325f2f4cefd8265e01b1bbbcf739dfc2296cdd0408f7252b1518131413cf8ec688eb88213c5e9ce9afa40e0bce406f718be6c09bb2db48b689a3a27006fec446625bfb3d5142ee9a6af5034842269bf695ff6ea45b5923af9af8190bd2ce237ba"}, @ss_cap={0xa, 0x10, 0x3, 0x9036339ed30b8f6e, 0x8, 0x80, 0x1, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "4f927951d3dbfb5dc3d4587228fe8506"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x11, 0x6c, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x541c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc01}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "4789987e6661508edd98717d34aab644bf2021b0cd9f7e8e9a74c7f088a9a7da37b4779d83dc6a2aabc658904367848323cf019a4d78a48a955e5457d30c54fd40f4cd9f1b893f05a3fcab20159b459a2a02682d2c86265bea9044ad9dad6d6f8b9c26ec27151babe0af4a539b534c9b76b5f96dd466b25138a29b8b648650005670219f693c6c1a54f04be65ed949cd548874398f02d9b4bb9ea2cc1b0b117da49ee697204c0c769a9950389d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}]}) 01:52:45 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:45 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) (fail_nth: 9) 01:52:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x9}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 01:52:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 457.551779][T12390] FAULT_INJECTION: forcing a failure. [ 457.551779][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 457.574141][T12390] CPU: 1 PID: 12390 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 457.584975][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.595025][T12390] Call Trace: [ 457.598301][T12390] [ 457.601232][T12390] dump_stack_lvl+0x1e3/0x2cb [ 457.605906][T12390] ? bfq_pos_tree_add_move+0x436/0x436 [ 457.611367][T12390] ? panic+0x76e/0x76e [ 457.615425][T12390] should_fail+0x384/0x4b0 [ 457.619831][T12390] ? tomoyo_encode+0x26f/0x540 [ 457.624606][T12390] should_failslab+0x5/0x20 [ 457.629283][T12390] __kmalloc+0x8b/0x370 [ 457.633448][T12390] ? copy_from_kernel_nofault_allowed+0x74/0xe0 [ 457.639692][T12390] tomoyo_encode+0x26f/0x540 [ 457.644272][T12390] ? dynamic_dname+0x1a0/0x1a0 [ 457.649076][T12390] tomoyo_realpath_from_path+0x5b4/0x5f0 [ 457.654700][T12390] tomoyo_path_perm+0x270/0x6b0 [ 457.659549][T12390] ? tomoyo_path_permission+0x360/0x360 [ 457.665078][T12390] ? trace_lock_acquire+0x56/0x180 [ 457.670178][T12390] ? __might_sleep+0xc0/0xc0 [ 457.674768][T12390] ? rcu_read_lock_any_held+0x5f/0x150 [ 457.680219][T12390] ? rcu_read_lock_bh_held+0x110/0x110 [ 457.685680][T12390] security_path_truncate+0xc0/0x140 [ 457.690953][T12390] do_sys_ftruncate+0x257/0x380 [ 457.695795][T12390] do_syscall_64+0x2b/0x70 [ 457.700201][T12390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 457.706082][T12390] RIP: 0033:0x7eff7b8890a7 [ 457.710566][T12390] Code: 48 89 e7 e8 cb e5 ff ff 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 1a 00 00 90 b8 4d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 457.730294][T12390] RSP: 002b:00007eff7c98ce78 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 457.733332][ T3673] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 457.738707][T12390] RAX: ffffffffffffffda RBX: 0000000020004280 RCX: 00007eff7b8890a7 [ 457.738727][T12390] RDX: 0000000000000000 RSI: 0000000008100000 RDI: 0000000000000004 [ 457.738738][T12390] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 457.738749][T12390] R10: 0000000000000002 R11: 0000000000000217 R12: 0000000000000004 [ 457.738760][T12390] R13: 0000000000000004 R14: 0000000008100000 R15: 0000000000022000 [ 457.738780][T12390] 01:52:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0xa}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 457.800997][T12390] ERROR: Out of memory at tomoyo_realpath_from_path. 01:52:45 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000004280)=[{0x0, 0x0, 0xffff2338}, {&(0x7f0000001000)="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", 0x1d7}]) (fail_nth: 10) [ 457.824430][T12390] loop2: detected capacity change from 0 to 264192 01:52:45 executing program 3: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:52:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0xd}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 457.926518][T12407] FAULT_INJECTION: forcing a failure. [ 457.926518][T12407] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 458.003279][ T3677] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 458.014832][T12407] CPU: 1 PID: 12407 Comm: syz-executor.2 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 458.025349][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.035413][T12407] Call Trace: [ 458.038704][T12407] [ 458.041642][T12407] dump_stack_lvl+0x1e3/0x2cb [ 458.046342][T12407] ? bfq_pos_tree_add_move+0x436/0x436 [ 458.051815][T12407] ? panic+0x76e/0x76e [ 458.055882][T12407] ? trace_lock_acquire+0x56/0x180 [ 458.061100][T12407] should_fail+0x384/0x4b0 [ 458.065642][T12407] prepare_alloc_pages+0x1d7/0x5a0 [ 458.070832][T12407] __alloc_pages+0x14d/0x5f0 [ 458.075421][T12407] ? __rmqueue_pcplist+0x1cb0/0x1cb0 [ 458.080720][T12407] ? rcu_read_lock_sched_held+0x5f/0x130 [ 458.083200][ T3673] usb 5-1: device descriptor read/64, error 18 [ 458.086362][T12407] ? rcu_read_lock_sched_held+0x5f/0x130 [ 458.098280][T12407] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 458.104259][T12407] ? rcu_read_lock_sched_held+0x5f/0x130 [ 458.109888][T12407] alloc_pages_vma+0x620/0xb40 [ 458.114654][T12407] ? mpol_shared_policy_lookup+0x15e/0x200 [ 458.120457][T12407] shmem_alloc_and_acct_page+0x4a3/0x1240 [ 458.126180][T12407] ? shmem_replace_page+0x1b90/0x1b90 [ 458.131569][T12407] ? lock_release+0x81/0x870 [ 458.136152][T12407] ? xas_load+0x127/0x150 [ 458.140509][T12407] ? __filemap_get_folio+0xe20/0x11f0 [ 458.145983][T12407] ? page_cache_prev_miss+0x500/0x500 [ 458.151478][T12407] ? rcu_read_lock_sched_held+0x5f/0x130 [ 458.157232][T12407] ? trace_lock_release+0x4d/0x140 [ 458.162333][T12407] ? pagecache_get_page+0x81/0x240 [ 458.167451][T12407] shmem_getpage_gfp+0x15a3/0x3030 [ 458.172597][T12407] ? shmem_getpage+0xa0/0xa0 [ 458.177182][T12407] ? fault_in_safe_writeable+0x240/0x240 [ 458.182862][T12407] ? __vfs_getxattr+0x3de/0x410 [ 458.188202][T12407] shmem_write_begin+0xcc/0x1a0 [ 458.193047][T12407] generic_perform_write+0x318/0x610 [ 458.198321][T12407] ? generic_file_direct_write+0x460/0x460 [ 458.204252][T12407] ? file_remove_privs+0x6a0/0x6a0 [ 458.209370][T12407] ? down_write+0x10d/0x170 [ 458.213960][T12407] __generic_file_write_iter+0x176/0x400 [ 458.219581][T12407] generic_file_write_iter+0xa7/0x1b0 [ 458.224950][T12407] vfs_write+0xa22/0xd40 [ 458.229197][T12407] ? __lock_acquire+0x1f80/0x1f80 [ 458.234217][T12407] ? file_end_write+0x230/0x230 [ 458.239055][T12407] ? read_lock_is_recursive+0x10/0x10 [ 458.244412][T12407] ? __fget_files+0x3d0/0x440 [ 458.249079][T12407] ? __fdget+0x189/0x210 [ 458.253396][T12407] __x64_sys_pwrite64+0x1af/0x240 [ 458.258407][T12407] ? vtime_user_exit+0x2b2/0x3e0 [ 458.263336][T12407] ? ksys_pwrite64+0x1d0/0x1d0 [ 458.268086][T12407] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 458.274057][T12407] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 458.280048][T12407] do_syscall_64+0x2b/0x70 [ 458.284468][T12407] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 458.290375][T12407] RIP: 0033:0x7eff7b83c0b7 [ 458.294785][T12407] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 458.314390][T12407] RSP: 002b:00007eff7c98ce50 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 458.322810][T12407] RAX: ffffffffffffffda RBX: 00007eff7b8d2a20 RCX: 00007eff7b83c0b7 [ 458.330770][T12407] RDX: 00000000000001d7 RSI: 0000000020001000 RDI: 0000000000000004 [ 458.338739][T12407] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 458.346700][T12407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 458.354668][T12407] R13: 0000000000000004 R14: 0000000020004298 R15: 0000000000000001 [ 458.362641][T12407] [ 458.375275][T12407] loop2: detected capacity change from 0 to 264192 [ 458.394279][ T3673] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 458.413310][ T3677] usb 1-1: Using ep0 maxpacket: 8 [ 458.553331][ T3677] usb 1-1: config index 0 descriptor too short (expected 19629, got 45) [ 458.562015][ T3677] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 458.571589][ T3677] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 458.582279][ T3677] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 458.623415][ T3673] usb 5-1: device descriptor read/64, error 18 [ 458.663445][ T3677] usb 1-1: config index 1 descriptor too short (expected 19629, got 45) [ 458.671927][ T3677] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 458.680910][ T3677] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 458.691345][ T3677] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 458.745449][ T3673] usb usb5-port1: attempt power cycle [ 458.793315][ T3677] usb 1-1: config index 2 descriptor too short (expected 19629, got 45) [ 458.801873][ T3677] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 458.810995][ T3677] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 458.821927][ T3677] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 458.903390][ T3677] usb 1-1: config index 3 descriptor too short (expected 19629, got 45) [ 458.911845][ T3677] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 458.922169][ T3677] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 458.932588][ T3677] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 459.015752][ T3677] usb 1-1: config index 4 descriptor too short (expected 19629, got 45) [ 459.024729][ T3677] usb 1-1: config 202 has too many interfaces: 114, using maximum allowed: 32 [ 459.033846][ T3677] usb 1-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 459.044320][ T3677] usb 1-1: config 202 has 0 interfaces, different from the descriptor's value: 114 [ 459.053852][ T3677] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.062874][ T3677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.173486][ T3673] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 459.303877][T12397] UDC core: couldn't find an available UDC or it's busy: -16 [ 459.311280][T12397] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 459.320759][ T3677] usb 1-1: USB disconnect, device number 11 [ 459.373324][ T3673] usb 5-1: device descriptor read/8, error -61