adf498bf2a6e62d1006d5a617e1ae808128d50c2ee36600ffe9ba8238e35a913395f6120e5cf31f14139ec1f4ba077949077c472cc44a2f3d528121646337c2663a43ca60c0868bb1fdbd49f14f9558b9ea62f2d40f6b5a1df02154211114e126f2420a4b1b6b998be4f1c8c8eca127a5"}, &(0x7f0000003240)=0x1008) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000000900010073797a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a3100000000060000000000000000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) (async) 00:14:20 executing program 0: pipe2$watch_queue(0x0, 0x80) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) 00:14:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) [ 860.774105][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:14:20 executing program 2: add_key(&(0x7f0000000040)='id_resolver\x00', 0x0, &(0x7f0000000200)="10", 0x1, 0xffffffffffffffff) 00:14:20 executing program 3: semget(0x1, 0x600, 0x0) 00:14:20 executing program 0: shmget(0x2, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) 00:14:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24}}, {{@in6=@mcast1}, 0x0, @in=@dev, 0x0, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:14:20 executing program 5: semtimedop(0x0, &(0x7f0000000140)=[{}], 0x1, &(0x7f00000001c0)) 00:14:20 executing program 4: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000001280)='keyring\x00', 0x0) 00:14:20 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{}], 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000005c0)=[{}]}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) pipe2$watch_queue(&(0x7f0000000480), 0x80) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x82000000) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 00:14:20 executing program 4: r0 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='syz', 0xffffffffffffffff) request_key(&(0x7f00000005c0)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='-\x00', 0x0) keyctl$negate(0xd, 0x0, 0x7, 0x0) 00:14:20 executing program 0: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000d80), 0x4, 0x5) 00:14:20 executing program 5: socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_dccp(0x2, 0x6, 0x0) 00:14:20 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)=[@rights={{0x10}}], 0x10}, 0x0) 00:14:20 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 00:14:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1ac, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x150, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}]}]}]}], {0x14, 0x10}}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 00:14:20 executing program 5: semop(0x0, &(0x7f0000000500)=[{0x0, 0x47, 0x1000}], 0x1) 00:14:20 executing program 4: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0xf000]) 00:14:20 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0xee00, 0xee01}}) 00:14:20 executing program 4: semop(0x0, &(0x7f0000000500)=[{}], 0x1) 00:14:20 executing program 5: accept$unix(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000100)={0xe, 0x0, {0x53, 0x401, 0x99a, {}, {}, @rumble}, {0x0, 0x0, 0x0, {0x5}, {0x8}, @rumble={0x0, 0x81}}}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x208000) 00:14:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 00:14:20 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) 00:14:21 executing program 5: r0 = semget(0x0, 0x4, 0x41) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000000)=""/184) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 861.022248][ T9341] tun0: tun_chr_ioctl cmd 2147767520 00:14:21 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 00:14:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1ac, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x150, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}]}]}]}], {0x14, 0x10}}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1ac, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x150, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}]}]}]}], {0x14, 0x10}}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) 00:14:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getgroups(0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xee01]) sendmsg$unix(r0, &(0x7f0000004b00)={&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{0x0}], 0x1, &(0x7f0000004980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x10}}], 0x30}, 0x0) 00:14:21 executing program 0: pipe2$watch_queue(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:14:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000004b00)={0x0, 0x0, 0x0}, 0x0) 00:14:21 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) 00:14:21 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 00:14:21 executing program 4: keyctl$search(0x14, 0x0, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) 00:14:21 executing program 0: ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2d0040, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff) 00:14:21 executing program 2: linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 00:14:21 executing program 3: r0 = fsopen(&(0x7f00000003c0)='affs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000400)='silent\x00', 0x0, 0x0) 00:14:21 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) 00:14:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1ac, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x150, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}]}]}]}], {0x14, 0x10}}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 00:14:21 executing program 3: pipe2$watch_queue(&(0x7f00000000c0), 0x80) 00:14:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) 00:14:21 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000004b00)={&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{0x0}], 0x1, &(0x7f0000004980)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) 00:14:21 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000940), &(0x7f0000000900)={'syz', 0x2}, 0x0, 0x0, r0) 00:14:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) 00:14:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x2}, 0x48) 00:14:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x901) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:14:21 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x8) 00:14:21 executing program 5: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000001580)=[{&(0x7f00000003c0)="c0e4dc555b3423c27250757822db17286a2c0d85c8e7844b5b12f6e91cc6e9d5950c4e9e7a60b37405ac6b3781489d6fb9670c4ae65e055caf4cff2eb7f499240230b65ed0608d3f4e3f92a91a2fcf990b9f8d882fd02d8629e98de45f399e77db1bd279966040d259fd56ec1409281ec252a0ec3e3f12f673d8e2328c1ae12986d5eb34db311f57fe076bb732b4aedc27534fb21e5de76ce185465b6fc8e1e46d83afc1f48f705590be3e1f49de823183ff0613d6dc7bf0c0421a134f879db331f43551f9f1b187f66543f1335c4a4a2bb919ad248592e3a8cb2f8c7563fc1e72ddffd94e687955d1f4ca6cdc3f81173409d0141758fd1d73a15ca2a5b37f3e84e03a554652b55bf401d8198061892a827fe50f00867fb0762a25f7e02034eeae9d63b802f9888ec58f40e9b2337497fe6906c378d8bea1b3de2868005892b1cc6a942798f947a53275325dac43e9a635b4bf502dec34d3b3fffe0c3a59dbbd522af51e2ecb30e6cdc5c2bd72dc01c23d7b5cda1f76d3ba4d1f0c7e018b37e18720791b210bb570b15528115ebc0241462097ece4db2def82d9a3aa5d02ec064ad1474cbb0ef7d6d04b82a42260b35fb1c9d1798989b542e306a653295ea8a6a31c9e2f3c5a583d64c9197a72f5ca26752950093798e10f80377b7995bb6d0330883845f6062d45cd78208bd43c9ea075dfdaab3d0f3370c87914a6ac1219aa8e968d8817e568cd44a12e1e0c02cd586dbfe18ee83fee92aac42b0ce0c9ea8b74b40779dfabc002bec99e9698873b8175dd6745fc98668beac1b2bc8b8fddfd15ba8bebedd0b8644e4e37b81f64847abd92345da21934ea1f451f00f321eaa98a120a1b8451afa723287721e7528245e960b0bd05b2168cf9c3aede845bb297cf8b19d73bd3ebd867b8578ec69efbf148936a607a266765bdb083df06f8e00472fc7e684d711a7b2e1583bdd92c9cf8a5d85a771de89420bf5d30e1ddc1d88e7b844367dac95c0f3f3af2ba5d527c6bf94409dd6f4f51cb1646fca594541f51fb615e2c3b57f0e017ebeeae2d449894567f3a56a3dd730ecb13d38f53b6210c2424a0cf3bae65c32e07995e842e449ca995aa646592d6280f5fb57ea5aab6ff4da311db7f9ac6e5f7edb65e692a1315448d612bff718f68cded5614fa95a6ad5e75b7b6ad75ed377fb42e8efc0ca71107e5cfa343ebee2b05abf1dd6c9fa3095bf8e77baf587428ecf85f9f617c4b6d2870210aa1040125d1492058411c4031e24d18b2b68e41db1c3aad6012f9f2b000d54f92aff9749eb6902157e75950c85bddbb025ac2cc9adbef0d3023ef9e16b8324cac558145ce7b2c21bd17b4eaee229bf688424ecf62e5821ba2bedf831509d85e63dead83a92e4cb8f4469433048b73602ae825bf02213f585a6296956571934d4207684672baba954cb01a4ae3659eccf6659bb4435a4db8f6f00716d3d6f59e2a58f0f049cad55ac2bd2dd5e7b948c5e7bebecf3af229d927746fd02b289ead487361aa461c73664b1ad72d449e7dd358322cb75de1ee792b5099351b8d3821f4c5e0e5b6b1945adba115b635a8946ee688abb933cc34c9fddf39f711c93c86d0ba9eea1eec17053f694c07bf222fe901b66207bfef70e0b8e07c9db60e4992144b1d192b9dcef638f0eff7086b8bc13c63675ec3ecee4841bc6cd30e5a903a5e1c8eacebdffaf001510e982928c34dd1fd042869f7f24d090f99fad44fd359fc3a58dac8259460a0fe707653a123af9936c986eb6185da7f9342857c98f5d3da51508b7db3a51e5e53439b0761f0fc9bb422e474883d786f794d12f0bbbf16eadefabb74a08a2f96b7c8969257195d78f3b4ff2f83bd90b7153998ce2bc32534361089e681eecf6d7b93c0cc8c86cae9a06341c1320b21948fb26b84c4d8d47636a53a8271b47dcde272a5593f2e075ca32aa414be4af3df0ae5b260ca53f8d3795fd4c99281b26fa7963845b5da17066b8183e10ba2766f697d624c4d845be87246cbd5ad4584da4d862afb2bc500408a395499dfcc5df2459701feed3a2f04285192636edecbb4e060752f06420ce9b690b699e33f9a527d9d7cc1994acdefd5ff2afab2174b8f254fcadd226785108a7b34f602d3f57399f0217629f0b65e93ab683d7b83ddc2d8e30ae15953f82d9c1dea666dc0d5424ef1595439ae9c511cf9f05fa1a9fa8f24643c348cb2485838ae5ca1f6bc2ded753bdda06ab67c3c26775d2d7b3cb1d74c493e24418cee0d5af612ab25d949310411f83260dac9d151e6d6fb7bc858d1aeda96d12391cf3912eae895d029ab6dd4f8457b4fde585f4c93746eea180db00ddfcd6ba88f3ab7914999c6f26ba926de78c261e362228b6715c8a05572ee904697c100ca21dc8d142aa3acc32771d57383a2b7344cbac52170f0062e3aa7fe08fbcda9925b21b8afe1845e9738dcabeed8713e6c8c13c687a1aea3b0e87e039f855c9ef1824b8351dcbf196b92d02b0bc206d927b47cd12da4a7d1c5f90be56290f98c02ea2d19c5f16e552bc3c49a2eacf1647294b214bc4909ca605ec22750e71a8217877f9a564562e852efb30a291e388b08e6ae82b113778235575c2b5deb8e7fc4194fb306ad62bfb356bb4419d2c5d61915663f5ee573c55044389c749f195a225c757df3365b5e39f337d11fc0cb5191397bae34cd5f892000c063356b8a9d95ac564b144bc2f72b7bd022eaa6aef92fcdc471c71b2f1bb5c1d924b99f454fe8ad4bc3eea9d6faac76067e42b11b86d99e9812324fad146140f4534719dde2e63ba85df0c585ae50211ab1e3ba5b98fc8b2f9a1783ab16e04aa78342261d261883937e480b83ba462657e78002d2aa224d6abec91cb26d5eef6d1eb235be319e27f5070b823e879e22eb507d638ee6c731ee556b5755dd33f778a4faa4dbf7a77e7d69a573e3ec09fab140c4cda9b3cce576559a804015009d7ed95af3fc5af38ef639fee50979552bcaf61c7f62b76f7a77e35e6eeadd429119932723b41f2a1143035d484be0862586878ecef45309bfae9277e495fc0834835c355bf55804d992b35c906f56454ded359e130bf45311e87dc371793e33dd521d6b28caef851ddb1f67dac654f4fff3dd35b2d1a529b17f9da9c4a552c20448b558d8833e17a9d8aafd1be57e3e0cadc94c8d952cc03e9bf5f164346fc75ed12791b12604273743c0e4b14a9d81897086fc048800893b0ffa9310abd82d34b79d7e41039ccbffdb7fe86dc97594d0c5e1a254edf27e59ec1677fb886cc24521f34c4a0d2142e8ea9e37efb6ed160fa2667c6ce24784ba45050a541693d587fe50c5216b9a361869c832599aaba7d0c9899b60cd230f6f5f24dea6b7cf7361102d86150c65a19d943dd5cdc315a1062c473f198826b4dc26ff4d6613ac3e494dd76ea9500bda885a05d7d9cde8ebbb3eac7b6ee6fd3eb35c43c6d312a5ada2794b212d92cf0ea3c4ee2a25312d94ee216bef31fee305eb5c3904daa016982d9c687d4f0df4029f2f73d30523de46fad56775242a147892570c785da4057efe6fe334d62b2ad8178ab040b35c60ea9780bcce3faa55d2eca80bdb13ccff5f5aae2a25415370aed5fefda46a0a584e34b2f94f9ac7dd3b64120dcf95812ab588230dfa7f37d32e27b6dddbfca9d98ddcf705ada8e30aad71830122e2059737bd93e48d9992fbcb17398d118d0e5dba2d6f7e5398cb8ee8a1d633e5e4c6f99b15ef7bbf5a926b4a04766aa71c2d55f25eb28e9115fcd39790f3ff942aabf70c1aab26ec1b1030a43245cb7330531ca7ef8911a4175d1df051def48618eecd866a9499a077c9d98b35ed5b29d04d68d0789896cb84e5024a8586235c140373bfad82498ea35128f548efb98250bb273c1fb42a3672a216b3b032a65869012b12c9570bc26b7c2fed0a46b39de7b3ea536b340ef740cb7e3cc1944d21baf28f3d3cb5ece4982e2f72ae0b0fe5a268c1ff5338e4ddf7e77d222e73a8c249bccd5c97e90bd2d2d9df86140e1029b413c03663526f9b8fabf711ca1ca841106c71375f0488b6d4ac0b42f03167b36c808720a74390e9169a1c37da12cd9ebd653c9171cbedc05634978ec320bfa0ae595bc960f691d0ac4c10c5371aee662f88ef9b1352fed99f363ebc812e2aee4b17c107af812792cf6295eaea37501f8ac429a4a5404f3210b293355a1a114e20c3969e4ff430f96d9ad849eb59cb01e1a0c0c9e1a51facd7e986a0dfc25bf1202aa47aebf5c26217c905051c483d2095fdf97089f623d4867d7c9f0db609802651ede75176d279a968bbe24a4e0d86b08c618ccdb7563b8a10da2201afbf7353e7877e5fa8a41de37c341bcee710ea86b801ee9bbbb633eaebe91d52a147aee62802c831fe5f30fde75171dd20866dcdb991bea6478746c6ba840e", 0xc41}], 0x0, 0x0) 00:14:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, 0xdf}) 00:14:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 00:14:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRES8=r0], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x94) [ 861.984571][ T9599] loop5: detected capacity change from 0 to 6 00:14:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xa}]}]}}, &(0x7f0000000080)=""/226, 0x32, 0xe2, 0x1}, 0x20) 00:14:21 executing program 2: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002480)) 00:14:22 executing program 3: syz_mount_image$udf(0x0, &(0x7f00000037c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000003e00), &(0x7f0000003e40)='./file0\x00', 0x0, 0x0, 0x0, 0x110c030, &(0x7f0000008240)) 00:14:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x2, 0x0, 0x0, 0x3}, 0x48) 00:14:22 executing program 4: keyctl$search(0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) [ 862.028528][ T3059] Dev loop5: unable to read RDB block 6 [ 862.029870][ T3059] loop5: unable to read partition table [ 862.031223][ T3059] loop5: partition table beyond EOD, truncated 00:14:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRES8=r0], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x94) 00:14:22 executing program 0: syz_mount_image$udf(&(0x7f0000003780), &(0x7f00000037c0)='./file0\x00', 0x0, 0x0, &(0x7f0000003880), 0x0, &(0x7f00000038c0)) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, &(0x7f0000004140), 0x0, 0x0) [ 862.058004][ T9613] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 862.059864][ T9613] UDF-fs: Scanning with blocksize 512 failed 00:14:22 executing program 3: getgid() syz_mount_image$udf(&(0x7f0000003780), &(0x7f00000037c0)='./file0\x00', 0x0, 0x0, &(0x7f0000003880), 0x10040, &(0x7f00000038c0)={[{}]}) syz_mount_image$hfsplus(&(0x7f0000003e00), 0x0, 0x40, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 00:14:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000002400)) 00:14:22 executing program 0: syz_mount_image$udf(&(0x7f00000023c0), &(0x7f0000002400)='./file0\x00', 0x0, 0x0, &(0x7f0000003480), 0x0, &(0x7f00000034c0)={[{@longad}, {@adinicb}, {@anchor}, {@uid}]}) 00:14:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRES8=r0], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYRES8=r0], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x94) (async) [ 862.090923][ T9613] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 862.092823][ T9613] UDF-fs: Scanning with blocksize 1024 failed 00:14:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000002780), 0xc) [ 862.100551][ T9613] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found 00:14:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x7194}, 0x48) [ 862.108397][ T9613] UDF-fs: Scanning with blocksize 2048 failed [ 862.111790][ T9613] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 862.112073][ T9620] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 862.113550][ T9613] UDF-fs: Scanning with blocksize 4096 failed [ 862.115168][ T9620] UDF-fs: Scanning with blocksize 512 failed [ 862.120095][ T9620] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 862.121761][ T9620] UDF-fs: Scanning with blocksize 1024 failed [ 862.154742][ T9620] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 862.161136][ T9620] UDF-fs: Scanning with blocksize 2048 failed 00:14:22 executing program 2: syz_clone(0x0, &(0x7f0000000080)="e2f53ba898175fd0a7fe68599561c647136c2e2133c0302bece06b57d9d67e7b36f3c49491c684e326b047ad0465b8cda021f4b22b00c607e8d9fe915f5178ec49cb80fa54d0ac481b3606089ae7bcb5933c5a16deeaacf417892fb55e797ac34c2b71f8e6", 0x65, &(0x7f0000000140), &(0x7f0000000180), 0x0) 00:14:22 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3f, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 00:14:22 executing program 5: symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 862.180167][ T9620] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 862.181901][ T9620] UDF-fs: Scanning with blocksize 4096 failed [ 862.183335][ T9620] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) 00:14:22 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[{&(0x7f0000000300)="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", 0xd01}], 0x0, 0x0) 00:14:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) 00:14:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 00:14:22 executing program 3: syz_mount_image$jffs2(0x0, 0x0, 0x0, 0x4, &(0x7f0000001580)=[{&(0x7f0000000080)='d', 0x1, 0x405c}, {&(0x7f0000000300)='y', 0x1}, {&(0x7f0000000100)='*', 0x1}, {&(0x7f0000000140)="9c", 0x1}], 0x0, 0x0) 00:14:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000001a00010073797a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) [ 862.284767][ T9744] loop3: detected capacity change from 0 to 64 [ 862.287009][ T9743] loop5: detected capacity change from 0 to 6 00:14:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '[/%#\'$'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x8800) 00:14:22 executing program 0: pipe2$9p(0x0, 0x0) syz_clone(0x40000000, &(0x7f0000002400), 0x0, 0x0, 0x0, &(0x7f00000024c0)="3e610947d3b271b1198db2d789bd144b237a962654ed76883d24fdb19a2f65467d47bf94fe403f8dd3b18b8f19adf9f55eb526c939a4fe88820b5d804126987eed5182406201925face75c208d34e9075a6080ae806fc2d5d28528d7b76122a5512dec8565") 00:14:22 executing program 3: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000780)={0x1, 0x0, 0x0}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="7bf3"], 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 00:14:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 862.312812][ T3059] Dev loop5: unable to read RDB block 6 [ 862.316945][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 862.319322][ T3059] loop5: unable to read partition table [ 862.320673][ T3059] loop5: partition table beyond EOD, truncated 00:14:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000001a00010073797a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000001a00010073797a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) (async) 00:14:22 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) [ 862.367238][T12789] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 862.380086][ T9755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.391031][ T9755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.397061][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:14:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x17, &(0x7f0000000000)="2c5e1673", 0x4) 00:14:22 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) dup(r0) epoll_create1(0x0) r1 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 863.196800][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.198192][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 00:14:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x3c}}, 0x0) 00:14:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa16f5) 00:14:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000001a00010073797a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000001a00010073797a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) (async) 00:14:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$lock(r0, 0x4, 0x0) 00:14:23 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x1, @link_local, 'vlan0\x00'}}, 0x1e) 00:14:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x1f, 0x200}, 0x48) [ 863.269673][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:14:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001440)={&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000001400)=[{0x0}, {0x0}], 0x2}, 0x10021) 00:14:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:14:23 executing program 3: bpf$MAP_CREATE(0x22, &(0x7f0000000440)=@bloom_filter, 0x48) 00:14:23 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x0, 0x0, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x38}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x16, &(0x7f0000000100)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x6, 0x7}]}, 0x1, [{0x0, 0x0}]}) 00:14:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x33}, @in=@multicast1}, 0x0, 0x41d}}, 0xf8}}, 0x0) 00:14:23 executing program 2: socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@mcast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x20, 0x19}}) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00", 0x1c}, {&(0x7f0000000080)="a1a10b9a979fb85511eef05629c3691fd846", 0x12}], 0x2}, 0x0) 00:14:23 executing program 3: bpf$MAP_CREATE(0x1c, 0x0, 0x0) 00:14:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000dc0)={'vxcan1\x00'}) [ 863.363947][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.376591][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.389160][ T9992] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 00:14:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x400, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x374, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf0c}, @NFTA_SET_DESC_CONCAT={0x178, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff5dc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcaea}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a40000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa3140}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e2a}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x54d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe14d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b21}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8be}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}]}], {0x14, 0x10}}, 0x43c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000200000000002e2f66696c65300097c042e6502ad70170460acb1ad882675ad250e1e4f8dfc182afe61c2d726062d74165927862a926a4693ce1280126ab1ce3845876dab0529ed9af650b48baa5c60f61c77fa2dd84d4705fecd64da6531fdd609e276f3295ef10c643b49f6035a69b7668cae6083b52f8b0d94247ecff853b695a6b40df774c42f4a43741d4a5813d"]) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x62}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8044041}, 0x24000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x101000, 0x4a) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x5c, 0x2, 0x6, 0xa03, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) 00:14:23 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 00:14:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}) 00:14:23 executing program 4: socket$inet(0x2, 0x0, 0x4000000) 00:14:23 executing program 2: syz_open_dev$rtc(&(0x7f0000000240), 0x6, 0x60282) 00:14:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x400, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x374, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf0c}, @NFTA_SET_DESC_CONCAT={0x178, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff5dc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcaea}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a40000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa3140}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e2a}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x54d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe14d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b21}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8be}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}]}], {0x14, 0x10}}, 0x43c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000200000000002e2f66696c65300097c042e6502ad70170460acb1ad882675ad250e1e4f8dfc182afe61c2d726062d74165927862a926a4693ce1280126ab1ce3845876dab0529ed9af650b48baa5c60f61c77fa2dd84d4705fecd64da6531fdd609e276f3295ef10c643b49f6035a69b7668cae6083b52f8b0d94247ecff853b695a6b40df774c42f4a43741d4a5813d"]) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x62}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8044041}, 0x24000000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x101000, 0x4a) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x5c, 0x2, 0x6, 0xa03, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) 00:14:23 executing program 3: socketpair(0x25, 0x3, 0x6, &(0x7f0000000180)) 00:14:23 executing program 0: io_setup(0x3, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:23 executing program 4: syz_clone(0x182aa000, 0x0, 0x72, 0x0, 0x0, 0x0) 00:14:23 executing program 5: add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 00:14:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x24}}, 0x0) 00:14:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x400, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x374, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf0c}, @NFTA_SET_DESC_CONCAT={0x178, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff5dc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcaea}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a40000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa3140}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e2a}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x54d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe14d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b21}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8be}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}]}], {0x14, 0x10}}, 0x43c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000200000000002e2f66696c65300097c042e6502ad70170460acb1ad882675ad250e1e4f8dfc182afe61c2d726062d74165927862a926a4693ce1280126ab1ce3845876dab0529ed9af650b48baa5c60f61c77fa2dd84d4705fecd64da6531fdd609e276f3295ef10c643b49f6035a69b7668cae6083b52f8b0d94247ecff853b695a6b40df774c42f4a43741d4a5813d"]) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x62}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8044041}, 0x24000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x101000, 0x4a) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x5c, 0x2, 0x6, 0xa03, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) 00:14:23 executing program 3: syz_clone(0x20041000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="c6") 00:14:23 executing program 4: unshare(0x4020080) 00:14:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x6004825) 00:14:23 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)='\x00') 00:14:24 executing program 0: io_setup(0x74a, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000500)=[{}, {}], &(0x7f0000000580)={0x0, r1+60000000}, 0x0) io_destroy(r0) 00:14:24 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 00:14:24 executing program 5: add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='C', 0x1, 0xfffffffffffffffe) 00:14:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}, 0x1, 0x0, 0x0, 0x104}, 0x0) socket$inet6(0xa, 0x1, 0x100) 00:14:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x7, 0x101}, 0x14}}, 0x0) 00:14:24 executing program 4: syz_clone(0x20041000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 00:14:24 executing program 2: process_madvise(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)="6f878e923d1c45888417b82d283bdeeff8f6f58073e2391f87dfeb73ab861533acb133fddc764bef672ca552915d499942bcbef8627b0b4f6742777df30ab2bfacad55d1cc83e413478d64dc5a918d28488948d6090c17e28170ddfbf622f179915dc709f91594f38cb39f6eb4be95470b915667d3b4a81d7006091e1d", 0xffffffffffffff8e}, {&(0x7f0000000240)="b11e29ed2a7517bb84fde4a8f65ac7dc66d1d14e3e170f9047fa45bf1b4a445f69555458f0b68f34cdc237c4ea3bded83912a0b00e50e265adfdcde51509cf3d929402a49f69bf6c87d0fc4178cbe03fe1c1bd75f1c29a9943693f9c35637c6e1355c1a1810c955649914851df3e1450d8e81c1a384443aa5841419871e7a4131fdbcefe68bc303a8e1d60ddcf8d07d0b6e4fec3be26", 0x96}, {&(0x7f0000000300)="05ee9db3e1af0f49ee6a8a080249afa1d4f401ed3c9b3ff6460c51334cefff58efccd353645584c1da4aa89b568b28", 0x2f}], 0x3, 0xb, 0x0) 00:14:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2, 0x0, 0x0, 0x448, 0x1}, 0x48) 00:14:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000004000000140006"], 0x28}}, 0x0) 00:14:24 executing program 2: bpf$PROG_LOAD_XDP(0xe, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000001c0)={{0x6, @loopback, 0x0, 0x0, 'fo\x00'}, {@multicast1}}, 0x44) [ 864.144001][T10312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:24 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 00:14:24 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:14:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x0, 0x0, 0x0, 0x2}, 0x48) 00:14:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x3a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) 00:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0xf}}, 0x0) 00:14:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}, 0x1, 0x0, 0x0, 0x104}, 0x0) (async) socket$inet6(0xa, 0x1, 0x100) 00:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 00:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) 00:14:24 executing program 3: r0 = socket(0x2, 0x3, 0xff) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000580), 0xc, &(0x7f0000000780)={0x0}}, 0x0) 00:14:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 00:14:24 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 00:14:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2280b}}, 0x20}}, 0x0) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000504000100"/20, @ANYRES32=r4, @ANYBLOB="9a"], 0x20}}, 0x0) [ 864.342450][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:24 executing program 3: r0 = socket(0xf, 0x3, 0x2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 00:14:24 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf4240, &(0x7f0000000180)=@raw=[@cb_func], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:24 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000002400)={[{@session}, {@nodecompose}, {@type={'type', 0x3d, "239faba5"}}, {@nobarrier}]}) [ 864.374683][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 864.382735][T10485] hfsplus: unable to find HFS+ superblock 00:14:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}, 0x1, 0x0, 0x0, 0x104}, 0x0) (async) socket$inet6(0xa, 0x1, 0x100) 00:14:24 executing program 4: clock_gettime(0xe471ac5df91189cf, 0x0) 00:14:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x28}}, 0x0) 00:14:24 executing program 2: socketpair(0x1d, 0x2, 0x6, &(0x7f0000000100)) 00:14:24 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2, 0x0, 0x0) 00:14:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x0, 0x8, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r1}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) 00:14:24 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8912, &(0x7f0000000180)) 00:14:24 executing program 2: bpf$PROG_LOAD_XDP(0xb, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:24 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x1e, 0x2, &(0x7f0000000180)=@raw=[@cb_func], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:24 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2000000000000218, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x0, 0x2}, 0x48) 00:14:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:14:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x9b, 0x1}}, @NFULA_CFG_QTHRESH={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x3, 0x20, @private2}]}, 0x28}}, 0x0) 00:14:24 executing program 5: bpf$PROG_LOAD_XDP(0x8, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x38}]}, 0x1c}}, 0x0) [ 864.845695][T10616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0) 00:14:24 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x2, &(0x7f0000000180)) 00:14:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000140)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0xc4c, 0x8, 0x0, 0x1, [{0x6c0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x45c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f7e04debf3fdb85872e9ac863c7b3e44a5a938be10dcaf4df307c9db191ad817"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_FLAGS={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x404, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3dc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c8fe33576381539c78891f078caf7efc269e2a01c669c1aaee6d5b4137d662d"}]}]}, @WGDEVICE_A_PEERS={0x1fc, 0x8, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3ef3c46e2ae7118367e21ca0d536357a7740a1f12d9451b7df7410953b758e33"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x17c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 00:14:24 executing program 2: renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 00:14:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') (rerun: 32) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x9b, 0x1}}, @NFULA_CFG_QTHRESH={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:24 executing program 3: rt_sigaction(0x1b, 0x0, 0x0, 0x8, &(0x7f0000000400)) 00:14:24 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/147, 0x93}], 0x1}, 0x1) sendto$unix(r1, &(0x7f00000000c0)="17", 0x1, 0x0, 0x0, 0x0) 00:14:24 executing program 4: rt_sigprocmask(0x2, &(0x7f0000000100), &(0x7f0000000140), 0x8) 00:14:24 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) accept$unix(r0, 0x0, 0x0) 00:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 00:14:25 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x111800, 0x0) 00:14:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, &(0x7f00000060c0)) 00:14:25 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) 00:14:25 executing program 4: renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5) 00:14:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x9b, 0x1}}, @NFULA_CFG_QTHRESH={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0), 0xc) 00:14:25 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), 0x10) 00:14:25 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/204) 00:14:25 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000900)="15", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/54, 0x36, 0x60, &(0x7f00000001c0)=@sco={0x1f, @none}, 0x80) 00:14:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 00:14:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 00:14:25 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 00:14:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 00:14:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), 0x4) 00:14:25 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x80, 0x0, 0x0) 00:14:25 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 00:14:25 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) 00:14:25 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) 00:14:25 executing program 0: mlock(&(0x7f0000fec000/0x14000)=nil, 0x14000) munmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000) 00:14:25 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 00:14:25 executing program 2: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @local={0xac, 0x14, 0x0}, @random="2567d6cba13a"}}}}, 0x0) 00:14:25 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @remote}, 0x0) 00:14:25 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$inet(r0, 0x0, &(0x7f00000001c0)=0xb68a87a3b3eabfc2) 00:14:25 executing program 0: munmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 00:14:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) 00:14:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18200000", @ANYRES32=r0, @ANYBLOB="000000000018"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'ipvlan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x400}]}) 00:14:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, &(0x7f0000000040), 0x7) 00:14:25 executing program 4: syz_clone(0x40000410, 0x0, 0x1e, 0x0, 0x0, 0x0) 00:14:26 executing program 2: syz_clone(0x10006300, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000040), 0x7) 00:14:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}]}, 0x28}}, 0x0) 00:14:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000040), 0x7) 00:14:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5451, 0x0) 00:14:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'macsec0\x00', 0x2}) ioctl$TUNSETCARRIER(r0, 0x8927, &(0x7f0000000000)) 00:14:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x0, 0x8, 0x2}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000000)={&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x10) 00:14:26 executing program 1: ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000040)={0x3, "246c045c5e2aa8d5071a2ea4259c09b3c2fbf9e350cf22b7f72f395525aafe06", 0x5, 0x2a, 0xffffffff, 0x3, 0x2, 0x0, 0x8000, 0x2}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x8001, 0x5, "b6949b6a4d0bbab04cf21ad436dc96e17af8a9173217405def4970b5ff604972", 0x0, 0x9, 0x0, 0x3, 0x19}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 00:14:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'macsec0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x5}]}) 00:14:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x2, &(0x7f00000000c0)={'pim6reg0\x00'}) 00:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x2, 0x93, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:14:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x8, 0x2, 0x2cd, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)="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", &(0x7f00000011c0), 0x800, r0}, 0x38) 00:14:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 00:14:26 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=@raw=[@exit, @cb_func, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xc1, &(0x7f0000000080)=""/193, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 00:14:26 executing program 1: ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000040)={0x3, "246c045c5e2aa8d5071a2ea4259c09b3c2fbf9e350cf22b7f72f395525aafe06", 0x5, 0x2a, 0xffffffff, 0x3, 0x2, 0x0, 0x8000, 0x2}) (async) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x8001, 0x5, "b6949b6a4d0bbab04cf21ad436dc96e17af8a9173217405def4970b5ff604972", 0x0, 0x9, 0x0, 0x3, 0x19}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 00:14:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x4, 0x4, 0x38e, 0xc00, 0x1}, 0x48) 00:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x8, 0x2, 0x2cd, 0x0, 0x1}, 0x48) close(r0) 00:14:26 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=@raw=[@exit, @cb_func, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xc1, &(0x7f0000000080)=""/193, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 00:14:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="94", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x10142) 00:14:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000000000000000000004"], &(0x7f0000000100)=""/179, 0x27, 0xb3, 0x1}, 0x20) 00:14:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000640)=""/227, 0x2c, 0xe3, 0x1}, 0x20) 00:14:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0x38e, 0x0, 0x1}, 0x48) 00:14:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x12, 0x0, 0x0, 0x0}, 0x20) 00:14:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000480)=r2, 0x12) 00:14:26 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001100)={0x3, "5d9f6e29ffe485a1a222b8fee3ea1b9964bd9b647fe23f3b3b77f4c4227c154d27bc67328394aabf8d5e96392b109acfcab1b9e816c0f68fc9c675a707af701ec13f979a2d8b8b7ad873c76579224199e05179475d86406f83f4abcb85f194d71506082247cdc9bcfa8cef47421ba4c63fdf0879ed86570e5358041bac0e1d2095ba0c82fb2705916609aa2a5717e58de9bfcd6b4aa8dce951516c72706bfe553077cff0e931e75a972e1d67dd63abf82e09c1f9eab4c60cbeb66d1b2caaf9298d41cca59f6fd0e2"}, 0xd0, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/199}, 0xcf, 0x0, 0x1000) 00:14:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) 00:14:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x19b8c, 0x93, 0x0, 0x1}, 0x48) 00:14:26 executing program 1: ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000040)={0x3, "246c045c5e2aa8d5071a2ea4259c09b3c2fbf9e350cf22b7f72f395525aafe06", 0x5, 0x2a, 0xffffffff, 0x3, 0x2, 0x0, 0x8000, 0x2}) (async) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x8001, 0x5, "b6949b6a4d0bbab04cf21ad436dc96e17af8a9173217405def4970b5ff604972", 0x0, 0x9, 0x0, 0x3, 0x19}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 00:14:26 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d"], &(0x7f0000000040)=""/254, 0x2e, 0xfe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1002, 0x93, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) 00:14:26 executing program 2: syz_clone(0x88001000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000940000009400000007"], &(0x7f0000000740)=""/4096, 0xb3, 0x1000, 0x1}, 0x20) 00:14:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x10, 0x4, 0x0, 0x6, 0x0, 0x1}, 0x48) 00:14:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x2, 0x93, 0x10, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 00:14:26 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000640)=""/227, 0x2b, 0xe3, 0x1}, 0x20) 00:14:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x10142) 00:14:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, &(0x7f00000002c0)=""/42}, 0x20) 00:14:26 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r0, 0xb704, 0x0) 00:14:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5460, 0x0) 00:14:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'macvlan0\x00', 0x1}) 00:14:26 executing program 1: getpeername$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000280)=0x6e) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/infiniband_srp', 0x10080, 0x40) r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x80000) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x22, 0x100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:26 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b80)={0x0, 0x0, 0x4}, 0x10) 00:14:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x13, 0x0, 0x1c}, 0x0) 00:14:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000940)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 00:14:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3183ef930f0066bb02b622361c83b776bf7161a0c07c1d5f409452375f986764059cbd6d40f4e1c393925854776f9e44f740217322713663c667bdbd37d2fc4a42cbc7820844cc26e5d3de4e27f97f6df311ff6dbb05fd90f31ab1c4c9fe5f68f18c4ab8f31ac2ff991e34df9cc95be8ba4a159bd845c9aa46210486b9480ccbd8f74fa999fe35a30d2286050322b70d18c705ad35a96e214cd9657b1e7f849b17ca11f890a6d21971534bfbc0d873f446a5d2", 0xb3}], 0x1, &(0x7f0000000100)=[@mark={{0xfffffffffffffd62}}, @timestamping={{0x14}}], 0x30}, 0x0) 00:14:26 executing program 2: syz_clone(0x180000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:26 executing program 5: gettid() r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_devices(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8) syz_clone(0xc2000000, &(0x7f0000000040)="0c30749e9d6e1fee306863528132285e01fb4fc7c75c331ed9ee92130f0cb897a0af3ed2514665ba035b920fa3", 0x2d, &(0x7f0000000140), 0x0, 0x0) 00:14:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:14:26 executing program 3: socketpair(0x0, 0x0, 0x464, &(0x7f0000000400)) 00:14:26 executing program 1: getpeername$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000280)=0x6e) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/infiniband_srp', 0x10080, 0x40) r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x80000) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x22, 0x100) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x0, 0x0, 0x0, 0xd10}, 0x48) 00:14:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="2ead3b7e9060ee7ba8839cd26a18844a4ab9e1f8ad7d69615f8911c33c7766b9a8e0d060e0e328aa37fd433a2903843e75ba4456b6058b198e40f8cc6c431a0d73874369736e87f98a9a133300df1e09bda683643e8b957a746048d8e43128529d05557e62b0fff9c8532dc731f78e798c6eb3056842e5680fa206a3d008c156eb1cb15e4bbf9aff2e4db19b58217b40949d2e7d6b17417f0a937d2730f821d9c5fb932c393e0d80ec07b7e823475c46df4d7e3bca79637cb6fcfeff857e19cb1d7f81c4814bea81fe863d", 0xcb}, {&(0x7f00000006c0)="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", 0xf35}, {&(0x7f0000000100)='<', 0x1}], 0x3}, 0x0) 00:14:26 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000880)=""/217, 0x2a, 0xd9, 0x1}, 0x20) 00:14:26 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) close(r1) 00:14:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) 00:14:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@var={0x9, 0x0, 0x0, 0xe, 0x2}, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000008c0)=""/190, 0x3f, 0xbe, 0x1}, 0x20) 00:14:26 executing program 1: getpeername$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000280)=0x6e) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/infiniband_srp', 0x10080, 0x40) r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x80000) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x22, 0x100) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, &(0x7f00000001c0)=""/205}, 0x20) 00:14:26 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r0, 0xb703, 0x0) 00:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) 00:14:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp, @exit]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xa0, &(0x7f0000000080)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, &(0x7f0000000180), 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x20) 00:14:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x5b, &(0x7f0000000080)}, 0x10) 00:14:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000940)=""/214, 0x28, 0xd6, 0x1}, 0x20) 00:14:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x2, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xb7fd7a453b18f75f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x20008004) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c890}, 0x24000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000200000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c00018008000140ffde0001140000001000010000000000000000000000000a"], 0x8c}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) recvfrom(r2, &(0x7f0000002200)=""/79, 0x4f, 0x140, &(0x7f0000002280)=@x25, 0x80) r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40000, 0x50, 0x1d}, 0x18) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 00:14:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000940)=""/214, 0x26, 0xd6, 0x1}, 0x20) 00:14:26 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x2, &(0x7f0000001440)=@raw=[@map_val], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:26 executing program 4: syz_clone(0xc2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:26 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x400002, 0x0) 00:14:26 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x6c}]}}, &(0x7f0000000940)=""/214, 0x26, 0xd6, 0x1}, 0x20) 00:14:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xb7fd7a453b18f75f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x20008004) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c890}, 0x24000010) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000200000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c00018008000140ffde0001140000001000010000000000000000000000000a"], 0x8c}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) recvfrom(r2, &(0x7f0000002200)=""/79, 0x4f, 0x140, &(0x7f0000002280)=@x25, 0x80) (async) r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40000, 0x50, 0x1d}, 0x18) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 00:14:26 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') bpf$ITER_CREATE(0x21, 0x0, 0x0) 00:14:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/189, 0x1a, 0xbd, 0x1}, 0x20) 00:14:26 executing program 3: syz_clone(0x6c020100, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:26 executing program 0: syz_clone(0xc2000000, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) 00:14:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5451, 0x0) 00:14:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000200)=""/129, 0x28, 0x81, 0x1}, 0x20) 00:14:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0xffffffffffffff5e) 00:14:27 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000340)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) [ 867.110957][T11940] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure 00:14:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xb7fd7a453b18f75f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x20008004) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c890}, 0x24000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000200000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c00018008000140ffde0001140000001000010000000000000000000000000a"], 0x8c}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) recvfrom(r2, &(0x7f0000002200)=""/79, 0x4f, 0x140, &(0x7f0000002280)=@x25, 0x80) r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40000, 0x50, 0x1d}, 0x18) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xb7fd7a453b18f75f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x20008004) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4c890}, 0x24000010) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000200000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c00018008000140ffde0001140000001000010000000000000000000000000a"], 0x8c}}, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmmsg$inet(r2, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) (async) recvfrom(r2, &(0x7f0000002200)=""/79, 0x4f, 0x140, &(0x7f0000002280)=@x25, 0x80) (async) openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x40000, 0x50, 0x1d}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) (async) 00:14:27 executing program 4: capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)) chroot(0x0) 00:14:27 executing program 2: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000340)) mlockall(0x1) 00:14:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) 00:14:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x22) 00:14:27 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 00:14:27 executing program 4: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() getrlimit(0x1, &(0x7f00000001c0)) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 00:14:27 executing program 0: syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:27 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000002c0)) semctl$IPC_RMID(r0, 0x0, 0x0) 00:14:27 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x52, 0x72, &(0x7f0000000000)="c11704e234e3417fea41cae3ba1101cb43f9e154ba7825ad46c352ed4e9f67b8d2a8f03edd3a09e54fa4dee7fab893857b9964d60710d79bdfd8cfd68538bc83375227ab6760a1be189f451862fd856fa1a4", &(0x7f0000000080)=""/114, 0xff, 0x0, 0xc7, 0x1000, &(0x7f0000000100)="a0367c5d8814e8fa3278b1d04a07218e6410c077777238a697fbc8bdbc79272c5af876d684c136343b2832b0ac3f92fd4d312b5715bd80806fbc706e864dc74aaf4e904c4d56c2b3cb7a9ab755fb1cd0b502e52715b1be6f5d0954a09c95105abceb1b74b71de3d538e54336e22703cb1d98e00ad3e0079aa7e101c37dc773b7366da6c24af20dc68f2e4b8108806ac75cdc7867c7485b5f3f45d9e465d36a82e2e566055995460873d9fcf993760bf01469f0396ae707d8eacc29b844f71c29c865106b3aa974", &(0x7f0000000b40)="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", 0x1, 0x6}, 0x48) syz_clone(0x40000000, &(0x7f00000002c0)="2807b7760098646fd4517006db0ef94c751f9c9a290ca7e736e4301bdc7e4ac764fe110f346d132c965371b13da1bd1d18ac80b9347516c331fb19f19bc6656ee67e637ae41282c68ae815f76404d2c0ada72e86b762d1fa9a1fb040d0dde6684dcdbb2240100bd944b0991dde5f78b994994d3943ef5d020142477811180702ce1cd108bf50d0fd825aea8164ee8beaeaabff964e4a332ad5f25a5c6f58464fb287facc2803847518d7ef1e016e99c45f9746362606d4065c7ae947adf6c4f843001f884a32914a9b44730f204ff91e0e702cd357948bf47a3b2d635c3126ce440eae26dee0e22fb063606cf7de59f8", 0xf0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 00:14:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40401, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$dsp(r0, &(0x7f00000001c0)="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", 0x15c) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) 00:14:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) (async) 00:14:27 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}]}}}]}}]}}, 0x0) [ 867.908068][T12125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:14:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x311, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 867.914651][T12125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:14:27 executing program 3: syz_mount_image$udf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5d, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000740)={[], [{@smackfsdef={'smackfsdef', 0x3d, ',:\''}}]}) 00:14:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), 0x98) 00:14:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) (async) 00:14:28 executing program 4: setitimer(0x0, &(0x7f0000000080)={{}, {0x7}}, 0x0) setitimer(0x0, &(0x7f0000000000)={{}, {0x4}}, &(0x7f0000000040)) 00:14:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0), &(0x7f0000001700)=0x4) 00:14:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000200), 0x4) 00:14:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @sliced}) 00:14:28 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10}}]}}}]}}]}}, 0x0) 00:14:28 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="5d650181193eac9238391a5f172d3ef144fcf7f3b5c03bb7e73074d5c9551ec4e76ed35274d74461bdaa670e3acfe92b000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d00000000000000600000000000000010000000000000000100000001000000010000000100000610000000400000000000000000000000000000000000000000000004503000000000000030000000001000000000000000000", 0xd3, 0x10000}], 0x0, &(0x7f00000000c0)={[{@space_cache_v2}]}) 00:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) [ 868.416281][ T3504] usb 1-1: new high-speed USB device number 20 using dummy_hcd 00:14:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4dde984510c82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864487367d6bab101646ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0d77b294e097e293db7f002c0024ab2fd8e5e7fb178f047ba32548b4d32972cba6f49051cec1ff6f16231bbb90a2d201a5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f810741ffffffe0c7d8e94a27a06a4e3d9acee835fd63384f52b8eeb70571e5bbb3e6d2b5eba505000000968983811f832d064048c0e0bbe46984f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d116b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c00020000000000009aa38a05e70591d5cdab1c268ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141fc98af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f29c661d322ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04db8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d65675bca9037426f643797be3e93da96b5643d3feed0b7c885d247c6b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfac497bc1389a3bafc0d3b51b5a34ab9e5746a1353322960964183842601e5364ecb6ad9168040388c7640bfa2f886c259718543de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e72daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf44195df032c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000000000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e28620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f169df06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856dde57b05f045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64437b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c10621ffe73a370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00"/2601], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 00:14:28 executing program 3: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 00:14:28 executing program 4: syz_clone(0x170200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x3, 0x1, 0x903, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:28 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:28 executing program 4: bpf$BPF_MAP_FREEZE(0x14, &(0x7f0000000540), 0x4) 00:14:28 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x3, 0x1, 0x903, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') (async) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x3, 0x1, 0x903, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008810) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) (async) 00:14:28 executing program 4: syz_clone(0x40002400, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 868.658155][ T3504] usb 1-1: Using ep0 maxpacket: 32 [ 868.776350][ T3504] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 868.936322][ T3504] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.938442][ T3504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.940193][ T3504] usb 1-1: Product: syz [ 868.941109][ T3504] usb 1-1: Manufacturer: syz [ 868.942156][ T3504] usb 1-1: SerialNumber: syz [ 868.986812][ T3504] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 869.188797][ T3112] usb 1-1: USB disconnect, device number 20 00:14:29 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='\a', 0xffffff1f}], 0x1, &(0x7f0000000400)=ANY=[], 0x100}, 0x1000000000000000) 00:14:29 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:29 executing program 2: bpf$BPF_MAP_FREEZE(0x2, &(0x7f0000000540), 0x4) 00:14:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x3, 0x1, 0x903, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') (async) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x3, 0x1, 0x903, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008810) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) (async) 00:14:29 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000011c0)='notify_on_release\x00', 0x2, 0x0) r2 = syz_clone(0x40002400, &(0x7f0000000000)="1496d244d9f4f0e18546c6f5157bc27a3ec03a8d28c8f4e9b8f1179a6a73f62dfc4bd7720317124f5c4d5930686ea831130dcc472c4d637d32f644ff67ec26836e77e317f90b30358ab227705af85531dacf950cc91fa12dfec15389fb9539ba4d65cd918fd368fecf70d95158eea5da9c6877548765e0a64f9b5c2085b40d72845cdf2e8cfe4f8776113ee4a06ab7128788bf4c8ef499c2074848b13025", 0x9e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001200)="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") syz_open_procfs$namespace(r2, &(0x7f0000001140)='ns/net\x00') 00:14:29 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x9, &(0x7f00000009c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6b, 0x8b, &(0x7f0000000100)=""/139, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:29 executing program 2: bpf$BPF_MAP_FREEZE(0xe, 0x0, 0x0) 00:14:29 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001e00)) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='\a', 0xffffff1f}], 0x1, &(0x7f0000000400)=ANY=[], 0x100}, 0x0) 00:14:29 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:29 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/4088, 0xff8}, {&(0x7f00000010c0)=""/16, 0x10}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000001100)=""/28, 0xfffffffffffffe4a}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x5, &(0x7f0000002280)=""/240, 0xf0}, 0x0) 00:14:29 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @ptr]}}, &(0x7f00000004c0)=""/235, 0x42, 0xeb, 0x1}, 0x20) 00:14:29 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:29 executing program 1: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00082ab17000fedb0200f84a1a002f3ed1e2fa32441b4a438394214f9ee78de6d0c2b22abc3cafec3d1325b6ef2859fdc977c37d49e1d968fd3674859170e43611d6e92dc2e743c3b86ba55ef523edcd67270b7041401838c525f3640c556bdf5f153d7457a45f15db357a08a2810dfd5bead32b4c8f76ada8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000080000002000000090001007379edbb8dd57e82f77a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x1) 00:14:29 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:29 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000029c0)=""/209, 0xd1}], 0x1}, 0x0) 00:14:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_macvtap\x00', 0x400}) 00:14:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0xf8}, 0x0) 00:14:29 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='a'}, 0x48) 00:14:29 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000480)=""/4096, 0xffffffffffffffb0}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/26, 0x1a}], 0x6, &(0x7f0000000340)=""/211, 0xd3}, 0x0) 00:14:29 executing program 1: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00082ab17000fedb0200f84a1a002f3ed1e2fa32441b4a438394214f9ee78de6d0c2b22abc3cafec3d1325b6ef2859fdc977c37d49e1d968fd3674859170e43611d6e92dc2e743c3b86ba55ef523edcd67270b7041401838c525f3640c556bdf5f153d7457a45f15db357a08a2810dfd5bead32b4c8f76ada8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000080000002000000090001007379edbb8dd57e82f77a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00082ab17000fedb0200f84a1a002f3ed1e2fa32441b4a438394214f9ee78de6d0c2b22abc3cafec3d1325b6ef2859fdc977c37d49e1d968fd3674859170e43611d6e92dc2e743c3b86ba55ef523edcd67270b7041401838c525f3640c556bdf5f153d7457a45f15db357a08a2810dfd5bead32b4c8f76ada8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40001) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000080000002000000090001007379edbb8dd57e82f77a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x1) (async) 00:14:29 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1, &(0x7f00000002c0)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xbf, &(0x7f0000000340)=""/191, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440), 0x10}, 0x80) 00:14:30 executing program 5: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:30 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000480)="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", 0x801) 00:14:30 executing program 5: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x801) 00:14:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000000c0)="75a33f8c33e91355795a4893a2300c62734ed47562973a1a8e3f661b9e24aac3d7452ebe137bbe68ff7383fc1a7d669edf13f4656dd3ff728b4630ebbe04a32d380a4e328d5c5072a84424f399110cfc337f646042d3632b5c833747de88201d9d8553ad6ec71deb5769712eb767d93f13ae06076495c45f6d2f0213b5ed0bb0a15f156e81f7e9619991cf", 0x8b}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/138, 0x8a}], 0x1}, 0x2) 00:14:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f00000004c0)=""/235, 0x3e, 0xeb, 0x1}, 0x20) 00:14:30 executing program 5: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:30 executing program 3: bpf$BPF_PROG_ATTACH(0xd, &(0x7f0000001780), 0x14) 00:14:30 executing program 1: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00082ab17000fedb0200f84a1a002f3ed1e2fa32441b4a438394214f9ee78de6d0c2b22abc3cafec3d1325b6ef2859fdc977c37d49e1d968fd3674859170e43611d6e92dc2e743c3b86ba55ef523edcd67270b7041401838c525f3640c556bdf5f153d7457a45f15db357a08a2810dfd5bead32b4c8f76ada8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000080000002000000090001007379edbb8dd57e82f77a300000000050000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000214000980100002800c0001800800014000000001140000001000010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x1) 00:14:30 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)="ca", &(0x7f0000000140)='a'}, 0x48) 00:14:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000019c0)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000016c0)=[{&(0x7f00000000c0)="75a33f8c33e91355795a4893a2300c62734ed47562973a1a8e3f661b9e24aac3d7452ebe137bbe68ff7383fc1a7d669edf13f4656dd3ff728b4630ebbe04a32d380a4e328d5c5072a84424f399110cfc337f646042d3632b5c833747de88201d9d8553ad6ec71deb5769712eb767d93f13ae06076495c45f6d2f0213b5ed0bb0a15f156e81f7e9619991cf4ce9c6973773fee6e197d1007e1e361c4e59cb5bd916ac6bbfec215d1ac7fe748855fac61c4841a85c5755afb888a5ddce17ddd00538d9b82f99dcca1081fb6fcacddb5bde1c3288ceb4566865f8fee02b9be09d5d3ef071b45a92139570ce33ce3c06ee90b10518", 0xf3}, {&(0x7f00000001c0)="7e3927540b86f34c3a2bdebb51d8f7a56cd2eb8f94a8a42df65af0d6b468cd8a6680f598484aa54a7db928b0", 0x2c}, {&(0x7f0000000280)="cbef4cf7e478033ee7a0fb4a59c2dcd80b326b30c939abefa7da24f5129b8c63c0358557140dbf663d86277664381361629ce69ebe178bee03950029ef622dbab8c6987490e22c4171a2953b5127d4376217551ee7f67e9a38b9f10f026a6a2e85", 0x61}, {&(0x7f0000000300)="db0351f5eea11c78be2c96f4f0869e8074aed3c542ba237eb3c520dcda7237c5172677f02849b978c69955d222e0786c235d2c41a202583d94b4ccccf9d4eb55939e69f48e780f6ee237ea5234bfeb9ccb72a132d6910e93b5c6100539dd8e5622b7a350d3b5d544a9f3ac95bb0ab13249bdee2de23539a522f2c4087eb7838fb0dc5d0f24b9ef0dad17e37fa2bc0234b108464213b5eab4af1f0d7ec8218cb38e3a5b8a4e51f91e739002758b1f522492798bb3303e14e255ab017cef60cd2636f4786f2dba612dd3094c80d86374128afe2015e098cebb19954476d5b1705c005651a67c43fb1bc813", 0xea}, {&(0x7f0000000400)="fdf556880ca19440e4269156cf8e7217760bbb8cbaf5f0267feaddce060e976690aa05783754c49d32c50f12d03892286feafec24812fe22c6f26b5c3ce53e7a5fc6e433df43634791bae7302e7395e6d0e680d1b9228cafd2046bf382c07c6e59e95ad78a87ca8d20485c58a9ce22c533a6cc349d721f500cad5ced8022ea1ce5494e434415bd17d1295d9aa3b9c8ddfcb3", 0x92}, {&(0x7f00000004c0)="6da7b5881207bc00c2ca40576fb2298ca76e912028b9da8872c19cd445d1e90870ab3b129516508fbc6bbdb892400d214df1fb1d85c75a7a7e92269038c3bec9a63aec2f89614d150c02fa29872231bde8c4a959981d7fab00f1ecab4f04a632a24d0b3b89a56f8163cfdc55a609a44afb9c23366cacc4cc75d8e1def5d9ce8c4b88353c2e805433a79aa482a7d5f537aa9dcb4a74fc795a6acecdece7bf12", 0x9f}, {&(0x7f0000000580)="4ac4a92a4725319b2f0e0da9164e37159323efe1cd8af69d0413d456c76020b505ddcd0c0f0466d6ac3cefce764f545b45a1e106d65db046d84143c55d287f756caa990688ee9ebfa864b31a7a0763b5da748b61210d5dfc5c53aa6074ba343d07d14af0f6ef76dca95668d76bb6e110a90ec5a7bc88ccbb9e2bad0250928136e7a08f0bf0c5daa781877010438a3a463c", 0x91}, {&(0x7f0000000640)="dd6195f6484b0fb4f7b17121a6d0612ebb060f3a9cd8c28281adf6887026d4ac53121d8ab97eb938fe8fcc0d7d98664534622ba3aeeee0010dec75b603f6f039c57d002bf06809354300d5", 0x4b}, {&(0x7f00000006c0)="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", 0xb8a}], 0x9}, 0x0) 00:14:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8) 00:14:30 executing program 5: r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:30 executing program 3: socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)) 00:14:30 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 00:14:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 00:14:30 executing program 2: syz_clone(0x40862100, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 00:14:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x74000000}]}}, &(0x7f0000001f80)=""/188, 0x26, 0xbc, 0x1}, 0x20) 00:14:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000001e80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:14:30 executing program 1: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x4, 0x1, 0x80, 0x4}, {0x2, 0x40, 0x20, 0x98}, {0x6, 0x5, 0xc1, 0x20}, {0x1, 0xfe, 0x20, 0x110}, {0x7, 0xa, 0x80, 0x3ff}]}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/243) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@struct={0x8, 0x4, 0x0, 0x4, 0x1, 0x7, [{0xb, 0x0, 0x81}, {0xa, 0x0, 0xfa56}, {0xc, 0x2, 0x80000000}, {0x2, 0x2, 0x7f}]}, @union={0x7, 0x4, 0x0, 0x5, 0x1, 0x200, [{0x3, 0x4, 0xfff}, {0x4, 0x4, 0x4}, {0x1, 0x0, 0x2718b4e}, {0xa, 0x2, 0x4}]}, @func={0xf, 0x0, 0x0, 0xc, 0x2}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @fwd={0xc}]}, {0x0, [0x61, 0x2e, 0x2e]}}, &(0x7f0000000300)=""/39, 0xb9, 0x27, 0x1}, 0x20) r1 = openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000004c0)={'syzkaller1\x00'}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x1c}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r4, r0, 0x0, r0}, 0x10) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) syz_clone(0x60000000, &(0x7f00000005c0)="defe2055cf24e24bc7a82de568484030d181d17c5e13aa7beb395fcb2198caad5850f8ea8eb2335d555066f0128ca362d2829e258dcee2f8f65cab97a58aefd201e52c39ab2383575280c40668bc58a489d02359204db15dfb05b4f0f9fe9753f559ab8341fb1f7c651beb01d6220267cf7651bb2f3d87cba9c3c69f03e7e4", 0x7f, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="41938689ba1ffacb19613b3446bd17f419984b620da101f1cc84920c0dc626f5d83c28b952bf6a9d056b896e64a4492b") write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000700)={'veth1_to_team', 0x32, 0x37}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x800, 0x9, 0x32, 0x40, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0xa}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xf) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={&(0x7f00000007c0)="fe78710cd411ab4bc1d694f19aaf36d395f2b34cc80aee4c370391b25da1d8b77f4c2115f8fe8bfdeeb6d203fb06cb8495d2b6f6738208700a4b537eb9998735bed8180119e769f5d08b257b610ea46554d8af2b054b1e92550ebab70e94488ad9924f36bf767e595362d78e9735e482e467dd1d17a0fa3cde3703a802148536a8685587ab41a201dc56cd85ea98ffe11e94d633cb8e", &(0x7f0000000880)=""/53, &(0x7f00000008c0)="2298432a12b193ebf29dca11a1f9fb2b344240703da89880e4ec3f173b17", &(0x7f0000000900)="bf20066bdde33e24446a8afcae25033c47911a2c250a990a83a571ba6fb092c4167711985ffa39db62f3edbf36ae20852b80959225316a504003cd819d7a0ebb6502bbffa534da3f49ab42ddbdd323648c068695a0fb0fef8d1ececba0d5b44669d4191e5c9ae13231522f7c0885632ebcb582326b8680e1199656aa4607cbed8ab8ffe1ea231ce6850facd3dccdf1a347676a2eb435c398be7158c7d17051b50d3227bda75873326d077736dfdedd112fe2f9e8d4", 0x8, 0x1}, 0x38) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000a40)=r3) 00:14:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5, 0x0, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000080)=""/207, 0x2b, 0xcf, 0x1}, 0x20) 00:14:30 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000051) 00:14:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000001e80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:14:30 executing program 5: r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x0, 0x8}, 0x48) 00:14:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf}]}}, &(0x7f0000001e80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:14:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0xf, 0x4}]}]}}, &(0x7f0000000080)=""/207, 0x36, 0xcf, 0x1}, 0x20) 00:14:31 executing program 0: socketpair(0x1d, 0x0, 0x3, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:14:31 executing program 2: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_clone(0x60000000, &(0x7f00000005c0), 0x0, 0x0, 0x0, &(0x7f00000006c0)) 00:14:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x22) 00:14:31 executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) [ 871.181332][T13226] can: request_module (can-proto-3) failed. 00:14:31 executing program 1: syz_clone(0x88020200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002380000000000000000001a95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 00:14:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x2, 0x0, 0x6, 0x0, 0x0, [{}]}]}}, &(0x7f0000001e80)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 00:14:31 executing program 0: bpf$OBJ_GET_MAP(0x16, 0x0, 0x0) [ 871.220534][T13242] Illegal XDP return value 14338 on prog (id 449) dev N/A, expect packet loss! 00:14:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x224102, 0x0) close(r0) 00:14:31 executing program 1: syz_clone(0xba829100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 00:14:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000040)=""/254, 0x2e, 0xfe, 0x1}, 0x20) 00:14:31 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000080)=""/207, 0x2b, 0xcf, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/15, 0xf}}, 0x10) 00:14:31 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000001e80)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 00:14:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8000}]}]}}, &(0x7f0000001f80)=""/188, 0x32, 0xbc, 0x1}, 0x20) 00:14:31 executing program 1: syz_clone(0x40862100, &(0x7f0000000000)="465808ff5282aa5237b3565c6d93193fe7582e3e304834857bb18401d916eed936d4bb3e251da170c0de28448ee8f1d242577f0ff2eb309488c5c3093681020fb01c9fd3c32d6a0c8684c8afec98de76731e553bef10c84677816ca90c041e25be6b", 0x62, &(0x7f0000000080), 0x0, 0x0) 00:14:31 executing program 0: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x4, 0x1, 0x80, 0x4}, {0x2, 0x40, 0x20, 0x98}, {0x6, 0x5, 0xc1, 0x20}, {0x1, 0xfe, 0x20, 0x110}, {0x7, 0xa, 0x80, 0x3ff}]}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/243) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@struct={0x8, 0x4, 0x0, 0x4, 0x1, 0x7, [{0xb, 0x0, 0x81}, {0xa, 0x0, 0xfa56}, {0xc, 0x2, 0x80000000}, {0x2, 0x2, 0x7f}]}, @union={0x7, 0x4, 0x0, 0x5, 0x1, 0x200, [{0x3, 0x4, 0xfff}, {0x4, 0x4, 0x4}, {0x1, 0x0, 0x2718b4e}, {0xa, 0x2, 0x4}]}, @func={0xf, 0x0, 0x0, 0xc, 0x2}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @fwd={0xc}]}, {0x0, [0x61, 0x2e, 0x2e]}}, &(0x7f0000000300)=""/39, 0xb9, 0x27, 0x1}, 0x20) r1 = openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000004c0)={'syzkaller1\x00'}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x1c}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r4, r0, 0x0, r0}, 0x10) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) syz_clone(0x60000000, &(0x7f00000005c0)="defe2055cf24e24bc7a82de568484030d181d17c5e13aa7beb395fcb2198caad5850f8ea8eb2335d555066f0128ca362d2829e258dcee2f8f65cab97a58aefd201e52c39ab2383575280c40668bc58a489d02359204db15dfb05b4f0f9fe9753f559ab8341fb1f7c651beb01d6220267cf7651bb2f3d87cba9c3c69f03e7e4", 0x7f, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="41938689ba1ffacb19613b3446bd17f419984b620da101f1cc84920c0dc626f5d83c28b952bf6a9d056b896e64a4492b") bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x800, 0x9, 0x32, 0x40, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0xa}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xf) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={&(0x7f00000007c0)="fe78710cd411ab4bc1d694f19aaf36d395f2b34cc80aee4c370391b25da1d8b77f4c2115f8fe8bfdeeb6d203fb06cb8495d2b6f6738208700a4b537eb9998735bed8180119e769f5d08b257b610ea46554d8af2b054b1e92550ebab70e94488ad9924f36bf767e595362d78e9735e482e467dd1d17a0fa3cde3703a802148536a8685587ab41a201dc56cd85ea98ffe11e94d633cb8e", &(0x7f0000000880)=""/53, &(0x7f00000008c0)="2298432a12b193ebf29dca11a1f9fb2b344240703da89880e4ec3f173b17", &(0x7f0000000900)="bf20066bdde33e24446a8afcae25033c47911a2c250a990a83a571ba6fb092c4167711985ffa39db62f3edbf36ae20852b80959225316a504003cd819d7a0ebb6502bbffa534da3f49ab42ddbdd323648c068695a0fb0fef8d1ececba0d5b44669d4191e5c9ae13231522f7c0885632ebcb582326b8680e1199656aa4607cbed8ab8ffe1ea231ce6850facd3dccdf1a347676a2eb435c398be7158c7d17051b50d3227bda75873326d077736dfdedd112fe2f9e8d4", 0x8, 0x1}, 0x38) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000a40)=r3) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000200), 0x10, &(0x7f0000000500)=[{&(0x7f0000000240)="e163269691bcf9fbf4d9f06104ffd1155a88d3c26d866adc9638e8d336d86548531d9b29aaf3b2a665a3f3bb258932adfbe287157a4e5c04f1e65a4ac42c2f050bc6ac6858a926f9c884de0e0a58eeca395f5306da49f1ab5c300f2b5f622113d29eb37697de1cfc866e9ef7491698edd276175ace7fdb4d8f6b981af06bc6df43cff4984cf1888436c07aae763df7b07f67393bec9f264ae773c1c07004", 0x9e}, {&(0x7f0000000300)="12adc9201e178e9bcb463748abe26c958a09120f42de6d5b26fabe6b6316f4684473043402f5d9ab3d04a3ed3ee14355fa8c9bcbe1bdb95c522c54b7214c6ff8fb98a02c1987089ea8faace6", 0x4c}, {&(0x7f0000000380)="4c8acfb110869431c2a998beeb5006e0d822cafcfe7f3f60d3b315d3f56e6a5a7a8acf3d1054dd143060bfb92999d4e8e7757e63db59bf2600d6b5bfbb3c11e2741f66b45a69b898cb8f5cdebaca4a301c578c3170d5740cbdc5c617bc434e962d6929171b476062948c8a70ebb2393dbd1cd3", 0xfffffd41}, {&(0x7f0000000400)="ba57c7230c45b20fe3c4f9310320f53029f3c3abf5efd55aded90c7de60f5dba48cc3e0c3a56050654f71e60575e314b7002a9db5640e340202086d36a392d3f951c737d0002649966d06b9431e4d6bc6b05106007d7315e97990b22ecbcc44418db3c6c0ab206af1c0dec93774a554cc1015d161ea9ae31b3b00aa3feb0935142320396bf4d37851e2a6014139af340ad0ea76e6809633c8543cce04f2a2b1b8ffcaa22ea8381849c1a6da66817c3ee6d8a1106e707b38290931e3b6d203f770f9274bf4662a833924526569d5656c9e6ff9af0815480518e26a0ae63528e982796dea224c131611f0a9bda9f46c08afff895ce4c00ce64e12ff9", 0xfb}], 0x4, &(0x7f0000000540)="1443553c85ee8f6fbdc794c691df418b03d85190aff7431d175837e1945aad14a7d68e96b7671b790807dabc9393615db9be3ab29957ff82340c5fbdcbc9b0075844388788e96099d10a597fdad944821feaf24c82a9606486ac396e1e0bc8c3f2b8f173af5850edcb4c6910237cbb3b9f92a846d486fb1dcc8f60dce12bc434ddd0f7c2d7c595e6a6e1321744dfea4fba9b2aa6c5572f51ce6e6a3d0ede34b90acf48d9eda6b1b446a81bcdd6f25e6d0989ea22a5e055e79879055fe1ab9d19b8c719c716a9d44594c6e58eabd63901fc316ce5", 0xd4, 0x20000000}, 0x4001) 00:14:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x4}]}}, &(0x7f00000001c0)=""/231, 0x26, 0xe7, 0x1}, 0x20) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 4: syz_clone(0x7840000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r0, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 2: syz_clone(0x28b7bd0d78818a7b, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x0, 0x0, 0x2e7e}, 0x48) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000080)=""/221, 0x2b, 0xdd, 0x1}, 0x20) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 00:14:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:31 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) 00:14:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x6c00}]}}, &(0x7f0000000080)=""/207, 0x26, 0xcf, 0x1}, 0x20) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 00:14:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x5452, &(0x7f0000000100)=""/4096) 00:14:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x460, 0x3b}, 0x48) 00:14:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, 0x0, 0x0) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 4: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:14:31 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/189, 0xbd}], 0x1}, 0x0) close(r1) 00:14:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) 00:14:31 executing program 3: r0 = socket(0xa, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}}, 0x0) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x10, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:31 executing program 0: syz_open_dev$evdev(&(0x7f0000001140), 0x8000000000000000, 0x410b81) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 871.773837][T13466] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:14:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x2}}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2f, 0x0, 0x0) 00:14:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0xfffffffffffffd10) 00:14:31 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:31 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000080)=@raw=[@kfunc], &(0x7f0000000380)='GPL\x00', 0x0, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xa8) 00:14:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, 0x0, 0x0) 00:14:32 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000140)={0x4}, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, &(0x7f0000000200)={r0}, 0x0) 00:14:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2d, 0x0, 0x0) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, 0x0, 0x0) 00:14:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x19, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 872.143176][T13548] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:32 executing program 3: bpf$MAP_CREATE(0x11, &(0x7f0000000080), 0x48) 00:14:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb, 0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 872.164679][T13548] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, 0x0, 0x0) [ 872.177439][T13548] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000380)='GPL\x00', 0x3, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:32 executing program 0: bpf$OBJ_GET_PROG(0x4, &(0x7f0000000440)={&(0x7f0000000400)='\x00'}, 0x10) 00:14:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x1c}, [@NDA_DST_IPV6={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 00:14:32 executing program 3: bpf$MAP_CREATE(0x19, 0x0, 0x0) 00:14:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x10, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, 0x0, 0x0) 00:14:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtaction={0x8a0, 0x30, 0x1, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x19, 0x8, 0x0, {0x1, 0x3, 0xa2, 0x1, 0x81, 0x8000}, {0x81, 0x2, 0x0, 0xb665, 0x0, 0x8}, 0x0, 0x1d54, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x0, 0x5, 0x8, 0x7, 0x800, 0x6, 0x400, 0x80000001, 0x2, 0x0, 0x6c, 0x0, 0x7, 0x5, 0x5a, 0x0, 0x0, 0x4836, 0x542, 0x3, 0x8d, 0x4, 0x2, 0x1, 0x1, 0x723, 0x5, 0x80000001, 0x81, 0x0, 0x9, 0x101, 0x9a03, 0x6, 0x7fffffff, 0x32, 0x9, 0x3ff, 0x46, 0x6, 0x6, 0x4, 0x1f, 0x8, 0xffffffff, 0x9, 0x1ec22000, 0xfffffffc, 0x1ff, 0x60, 0x7, 0x8, 0x3, 0x10001, 0x81, 0x5, 0xba, 0x6, 0x81, 0x1, 0x7, 0x20, 0x161, 0x7c, 0x1, 0x3, 0x3, 0x6, 0x80000001, 0x8001, 0x0, 0x2, 0x2, 0x2, 0xf6, 0x3, 0x7, 0x400, 0x5d0a, 0x4, 0x6, 0x958, 0x400, 0x8, 0x7, 0x1, 0x2, 0x7, 0x2, 0x2, 0x1, 0x20a, 0x3, 0x4, 0x7, 0xee, 0x5, 0x2, 0x0, 0x9, 0x8, 0x80000001, 0x400, 0x3, 0xffff, 0x5, 0x9d, 0x9, 0x8, 0x8, 0x6, 0x9, 0xffffff80, 0xfffffffb, 0x4, 0x8, 0x9, 0x10000, 0x100, 0x3, 0x8, 0x7, 0x0, 0x4, 0x7, 0xc1ad, 0x1, 0xfffffffd, 0xa3ec, 0x80000001, 0x2, 0x1, 0x8, 0x0, 0x4, 0x2, 0x7fff, 0x1, 0x10000, 0xff, 0xffff, 0x7, 0x2, 0x0, 0x5, 0x4, 0x3, 0x8, 0x401, 0xa1, 0x7f, 0xfffffffc, 0x7, 0x3, 0x1, 0x3, 0x3, 0x80000001, 0x0, 0x8, 0x40, 0x5c, 0x1, 0x80000001, 0x1f, 0x6, 0xae88, 0x8, 0x9, 0xfffffffa, 0xcbec, 0x58, 0x6, 0x1, 0x5, 0x8, 0x0, 0x1ff, 0x3, 0x1000, 0xfffffffb, 0x6, 0x9, 0x7, 0x3, 0xffffff7f, 0x16800000, 0x7, 0xd2, 0x8ff4, 0x1f, 0x800, 0x400, 0x0, 0x0, 0x9, 0x100, 0x1, 0x9, 0x5f, 0x7ff, 0xfff, 0x1, 0x2, 0x7, 0x20, 0x6, 0x7, 0xffffffff, 0x7, 0x7, 0xb7, 0x1, 0x8, 0xf7, 0x7, 0x7f, 0xa3a, 0x3, 0xb11, 0x7, 0x0, 0x2, 0x800, 0x5, 0x30, 0x81, 0x8, 0x5, 0x1, 0x6, 0xffff, 0xffffeabe, 0x0, 0x9, 0xffffffef, 0x5a, 0x7fffffff, 0x6, 0x7, 0x9e7c, 0x80000000, 0x9, 0x4, 0x3f, 0x5, 0xfff, 0x8, 0x40, 0x5, 0xfffffffd, 0x3, 0xaef, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0xfff, 0x3, 0x1, 0x100, 0x8, 0x8, 0xfff, 0x1d64, 0x5, 0x800, 0xfffffffc, 0x9, 0x4e66, 0xffff8000, 0x4000000, 0x8000, 0x3, 0x80000001, 0x4, 0xfff, 0x6, 0x20, 0x7fff, 0x1, 0x9, 0x8, 0x0, 0xfffffe01, 0xb1, 0x4, 0xfffffffc, 0x6, 0x9, 0x5, 0x401, 0x7f, 0xe7cd, 0x9, 0x80000001, 0xff, 0x2, 0x5, 0x3, 0xffffffff, 0x8, 0x1, 0x1, 0x1, 0xb7, 0x20, 0x5, 0x0, 0x4, 0x4, 0x0, 0xffffffff, 0x7fffffff, 0x81, 0xffff, 0x101, 0x20, 0x3f, 0x0, 0x5, 0x200, 0x4, 0x8, 0x7, 0x7, 0x6, 0x7, 0x0, 0x2, 0x0, 0x7ffffffb, 0x7, 0x0, 0x2, 0x101, 0x4, 0xff, 0x0, 0x40, 0x1f, 0x1ff, 0x7, 0x2, 0x1, 0x40, 0x8, 0x6be, 0x10001, 0xacb7, 0x81, 0x3c6, 0x440, 0x7, 0x5, 0xde, 0x800, 0x100, 0x1f0, 0x0, 0x8, 0xffff, 0x3f, 0x1, 0x4, 0x80000000, 0xff109ff3, 0xffff, 0x4, 0x0, 0x0, 0x9, 0x9, 0x3, 0x5, 0x8, 0x10000, 0x401, 0xffffffff, 0x8, 0x10000, 0x2, 0x140, 0x2, 0x4, 0x8, 0xc9b, 0xb9a0, 0xfffff001, 0x1000, 0x800, 0x4, 0xffff9138, 0xcfa, 0xcc7, 0x3, 0x4, 0x2, 0x93e, 0x30, 0x7, 0x4, 0xfa9, 0x20, 0x10000, 0xfffff505, 0x5, 0xfffffffd, 0x5, 0xffffd8e3, 0x400, 0x7fff, 0x1ff, 0x6, 0x4fe, 0x2, 0x200, 0x1, 0x6, 0x9b9, 0x4, 0x6, 0x8, 0xfffffff8, 0x7, 0x67, 0x81, 0x6, 0x4, 0xffffffff, 0x9, 0x1, 0x0, 0x800, 0xffffff4f, 0x6, 0x2, 0xfffffff8, 0x8, 0x9, 0x6, 0x20, 0x7, 0x1ff, 0xbe, 0x2, 0x7, 0x45d57ff8, 0xffffff7f, 0x14e5, 0x4, 0x1, 0x1, 0x0, 0x42e, 0x400, 0x9, 0x14, 0x2, 0x7, 0x5, 0x1f, 0x8001, 0x9, 0x5, 0x9, 0xffff, 0x0, 0xae, 0x6, 0x2, 0x8, 0x3, 0x101, 0x3, 0x3, 0x5e24, 0x5, 0x74, 0x2, 0x7, 0x80, 0x5, 0xe7, 0x0, 0x1ff, 0x0, 0x1f, 0x101, 0x7, 0x80, 0xffff, 0x6]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x10) 00:14:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xf, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 872.263843][T13573] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x2a, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) remap_file_pages(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) [ 872.319856][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x42, 0x0, 0x0) 00:14:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x14, 0x2a, 0x1}, 0x14}}, 0x0) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x10, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:32 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x4}, &(0x7f0000000180)={0x1}, &(0x7f0000000200)={r0}, 0x0) 00:14:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x0, 0x0, 0x300, 0xe8, 0x3d0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @local, [], [], 'team0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "ef08"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'macvlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"c8d3"}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 00:14:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000}, 0x80) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:32 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00009f8000/0x2000)=nil, 0x2000, 0x0, 0x28011, r1, 0x0) io_submit(0x0, 0x0, 0x0) [ 872.443064][T13603] x_tables: duplicate underflow at hook 1 00:14:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1c, 0x0, 0x0) 00:14:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x2, 0x5e0, 0x0, 0x0, 0x300, 0xe8, 0x3d0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @local, [], [], 'team0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "ef08"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'macvlan1\x00'}, 0x0, 0xf8, 0x142, 0x0, {}, [@common=@mh={{0x28}, {"c8d3"}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 00:14:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x3e, 0x0) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000100)=""/4096) 00:14:32 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf4240, &(0x7f0000000080)=@raw=[@jmp], &(0x7f0000000380)='GPL\x00', 0x0, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=@newtaction={0x60, 0x31, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_connmark={0x48, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x15, 0x6, "3f55e3674a29b58d07f62ca9bef0b47f58"}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 872.517254][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 872.519411][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 872.521446][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2e, 0x0, 0x0) 00:14:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x2001058) 00:14:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3e, 0x0) ioctl$EVIOCGREP(r0, 0x40084503, &(0x7f0000000100)=""/4096) 00:14:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x29, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x1, &(0x7f0000000540)=@raw=[@alu], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 872.605167][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:32 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000280)=@framed={{}, [@jmp]}, &(0x7f0000000300)='GPL\x00', 0x7, 0xda, &(0x7f0000000340)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x120, 0x268, 0x498, 0x0, 0x268, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@ipv6={@private1, @mcast2, [], [], 'lo\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x498}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@loopback}}}, {{@ipv6={@private0, @mcast2, [], [], 'wlan1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_batadv\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 00:14:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x7, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, 0x0, 0x0) 00:14:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:14:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, 0x0, 0x0) 00:14:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00'}) 00:14:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:14:32 executing program 4: bpf$OBJ_GET_PROG(0x13, &(0x7f0000000440)={&(0x7f0000000400)='\x00'}, 0x10) 00:14:32 executing program 3: socketpair(0x2, 0x2, 0x2, &(0x7f0000000680)) 00:14:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4a, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:32 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000100)='./file0/file0\x00'}, 0x10) 00:14:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x25, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, 0x0}, 0x0) 00:14:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x5}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:33 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$MAP_CREATE(0x5, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x48) 00:14:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3b, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x38, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x5421, &(0x7f0000000100)=""/4096) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, 0x0}, 0x0) 00:14:33 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x13, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x2e, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtaction={0x8a0, 0x30, 0x1, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x19, 0x8, 0x0, {0x1, 0x3, 0xa2, 0x1, 0x81, 0x8000}, {0x81, 0x2, 0x0, 0xb665, 0x0, 0x8}, 0x0, 0x1d54, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x0, 0x5, 0x8, 0x7, 0x800, 0x6, 0x400, 0x80000001, 0x2, 0x0, 0x6c, 0x0, 0x7, 0x5, 0x5a, 0x0, 0x0, 0x4836, 0x542, 0x3, 0x8d, 0x4, 0x2, 0x1, 0x1, 0x723, 0x5, 0x80000001, 0x81, 0x0, 0x9, 0x101, 0x9a03, 0x6, 0x7fffffff, 0x32, 0x9, 0x3ff, 0x46, 0x6, 0x6, 0x4, 0x1f, 0x8, 0xffffffff, 0x9, 0x1ec22000, 0xfffffffc, 0x1ff, 0x60, 0x7, 0x8, 0x3, 0x10001, 0x81, 0x5, 0xba, 0x6, 0x81, 0x1, 0x7, 0x20, 0x161, 0x7c, 0x1, 0x3, 0x3, 0x6, 0x80000001, 0x8001, 0x0, 0x2, 0x2, 0x2, 0xf6, 0x3, 0x7, 0x400, 0x5d0a, 0x4, 0x6, 0x958, 0x400, 0x8, 0x7, 0x1, 0x2, 0x7, 0x2, 0x2, 0x1, 0x20a, 0x3, 0x4, 0x7, 0xee, 0x5, 0x2, 0x0, 0x9, 0x8, 0x80000001, 0x400, 0x3, 0xffff, 0x5, 0x9d, 0x9, 0x8, 0x8, 0x6, 0x9, 0xffffff80, 0xfffffffb, 0x4, 0x8, 0x9, 0x10000, 0x100, 0x3, 0x8, 0x7, 0x0, 0x4, 0x7, 0xc1ad, 0x1, 0xfffffffd, 0xa3ec, 0x80000001, 0x2, 0x1, 0x8, 0x0, 0x4, 0x2, 0x7fff, 0x1, 0x10000, 0xff, 0xffff, 0x7, 0x2, 0x0, 0x5, 0x4, 0x3, 0x8, 0x401, 0xa1, 0x7f, 0xfffffffc, 0x7, 0x3, 0x1, 0x3, 0x3, 0x80000001, 0x0, 0x8, 0x40, 0x5c, 0x1, 0x80000001, 0x1f, 0x6, 0xae88, 0x8, 0x9, 0xfffffffa, 0xcbec, 0x58, 0x6, 0x1, 0x5, 0x8, 0x0, 0x1ff, 0x3, 0x1000, 0xfffffffb, 0x6, 0x9, 0x7, 0x3, 0xffffff7f, 0x16800000, 0x7, 0xd2, 0x8ff4, 0x1f, 0x800, 0x400, 0x0, 0x0, 0x9, 0x100, 0x1, 0x9, 0x5f, 0x7ff, 0xfff, 0x1, 0x2, 0x7, 0x20, 0x6, 0x7, 0xffffffff, 0x7, 0x7, 0xb7, 0x1, 0x8, 0xf7, 0x7, 0x7f, 0xa3a, 0x3, 0xb11, 0x7, 0x0, 0x2, 0x800, 0x5, 0x30, 0x81, 0x8, 0x5, 0x1, 0x6, 0xffff, 0xffffeabe, 0x0, 0x9, 0xffffffef, 0x5a, 0x7fffffff, 0x6, 0x7, 0x9e7c, 0x80000000, 0x9, 0x4, 0x3f, 0x5, 0xfff, 0x8, 0x40, 0x5, 0xfffffffd, 0x3, 0xaef, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0xfff, 0x3, 0x1, 0x100, 0x8, 0x8, 0xfff, 0x1d64, 0x5, 0x800, 0xfffffffc, 0x9, 0x4e66, 0xffff8000, 0x4000000, 0x8000, 0x3, 0x80000001, 0x4, 0xfff, 0x6, 0x20, 0x7fff, 0x1, 0x9, 0x8, 0x0, 0xfffffe01, 0xb1, 0x4, 0xfffffffc, 0x6, 0x9, 0x5, 0x401, 0x7f, 0xe7cd, 0x9, 0x80000001, 0xff, 0x2, 0x5, 0x3, 0xffffffff, 0x8, 0x1, 0x1, 0x1, 0xb7, 0x20, 0x5, 0x0, 0x4, 0x4, 0x0, 0xffffffff, 0x7fffffff, 0x81, 0xffff, 0x101, 0x20, 0x3f, 0x0, 0x5, 0x200, 0x4, 0x8, 0x7, 0x7, 0x6, 0x7, 0x0, 0x2, 0x0, 0x7ffffffb, 0x7, 0x0, 0x2, 0x101, 0x4, 0xff, 0x0, 0x40, 0x1f, 0x1ff, 0x7, 0x2, 0x1, 0x40, 0x8, 0x6be, 0x10001, 0xacb7, 0x81, 0x3c6, 0x440, 0x7, 0x5, 0xde, 0x800, 0x100, 0x1f0, 0x0, 0x8, 0xffff, 0x3f, 0x1, 0x4, 0x80000000, 0xff109ff3, 0xffff, 0x4, 0x0, 0x0, 0x9, 0x9, 0x3, 0x5, 0x8, 0x10000, 0x401, 0xffffffff, 0x8, 0x10000, 0x2, 0x140, 0x2, 0x4, 0x8, 0xc9b, 0xb9a0, 0xfffff001, 0x1000, 0x800, 0x4, 0xffff9138, 0xcfa, 0xcc7, 0x3, 0x4, 0x2, 0x93e, 0x30, 0x7, 0x4, 0xfa9, 0x20, 0x10000, 0xfffff505, 0x5, 0xfffffffd, 0x5, 0xffffd8e3, 0x400, 0x7fff, 0x1ff, 0x6, 0x4fe, 0x2, 0x200, 0x1, 0x6, 0x9b9, 0x4, 0x6, 0x8, 0xfffffff8, 0x7, 0x67, 0x81, 0x6, 0x4, 0xffffffff, 0x9, 0x1, 0x0, 0x800, 0xffffff4f, 0x6, 0x2, 0xfffffff8, 0x8, 0x9, 0x6, 0x20, 0x7, 0x1ff, 0xbe, 0x2, 0x7, 0x45d57ff8, 0xffffff7f, 0x14e5, 0x4, 0x1, 0x1, 0x0, 0x42e, 0x400, 0x9, 0x14, 0x2, 0x7, 0x5, 0x1f, 0x8001, 0x9, 0x5, 0x9, 0xffff, 0x0, 0xae, 0x6, 0x2, 0x8, 0x3, 0x101, 0x3, 0x3, 0x5e24, 0x5, 0x74, 0x2, 0x7, 0x80, 0x5, 0xe7, 0x0, 0x1ff, 0x0, 0x1f, 0x101, 0x7, 0x80, 0xffff, 0x6, 0x0, 0xfffffff7, 0x1, 0x101, 0x5]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x10) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, 0x0}, 0x0) 00:14:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x20000550, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 3: bpf$OBJ_GET_PROG(0x14, &(0x7f0000000440)={&(0x7f0000000400)='\x00'}, 0x10) 00:14:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 0: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x2, 0x0, {0xc00}}, 0x80, 0x0}}], 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x2, 0x0, {0xc00}}, 0x80, 0x0}}], 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:14:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x14, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)}, 0x0) 00:14:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x18, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 2: bpf$OBJ_GET_PROG(0x23, &(0x7f0000000440)={&(0x7f0000000400)='\x00'}, 0x10) 00:14:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x0) 00:14:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x2, 0x518, 0x0, 0x0, 0x300, 0xe8, 0x3d0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @local, [], [], 'team0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0xe8}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)}, 0x0) 00:14:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@can_delroute={0x4c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "fd6ba154ca05373b"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "2f3f5a251def54fe"}, 0x1}}]}, 0x4c}}, 0x0) 00:14:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x2, &(0x7f0000000100)=""/4096) 00:14:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x120, 0x268, 0x498, 0x0, 0x268, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@ipv6={@private1, @mcast2, [], [], 'lo\x00', 'pimreg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x498}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@loopback}}}, {{@ipv6={@private0, @mcast2, [], [], 'wlan1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_batadv\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:14:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x37, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)}, 0x0) 00:14:33 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000280)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000300)='GPL\x00', 0x7, 0xda, &(0x7f0000000340)=""/218, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11}, 0x48) 00:14:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) 00:14:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1c, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/850], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:14:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x32, 0x0, 0x0) 00:14:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x1a, 0x9, &(0x7f0000000200)=@framed={{}, [@func, @map_idx_val, @btf_id, @func]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 873.446580][T13851] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 00:14:33 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xc, &(0x7f00000000c0)=@raw=[@kfunc, @exit, @map_val, @kfunc, @map_idx, @call, @btf_id, @alu], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x8, &(0x7f0000001740)=""/8, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001780), 0x8, 0x10, &(0x7f00000017c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0xaf) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) 00:14:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 1: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) 00:14:33 executing program 4: clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x4}, 0x0, &(0x7f0000000200)={r0}, 0x0) 00:14:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x24, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) 00:14:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f0000000380)='GPL\x00', 0x3, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x19, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x21, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0xc8, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) [ 873.575948][T13876] loop2: detected capacity change from 0 to 20 00:14:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x0, 0x2000, 0x300, 0xe8, 0x3d0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @local, [], [], 'team0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "ef08"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'macvlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"c8d3"}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) [ 873.592739][T13876] loop2: unable to read partition table 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) [ 873.600101][T13876] loop2: partition table beyond EOD, truncated [ 873.610152][T13876] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:14:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x3e, 0x0) ioctl$EVIOCGREP(r0, 0x40084503, &(0x7f0000000100)=""/4096) [ 873.617895][T13876] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 873.627155][T13876] syz-executor.2: attempt to access beyond end of device [ 873.627155][T13876] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 873.644025][T13876] syz-executor.2: attempt to access beyond end of device [ 873.644025][T13876] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 873.657580][T13876] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:14:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, 0x0, 0x0) 00:14:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x3, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 00:14:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x2, 0x5e0, 0x0, 0x0, 0x300, 0xe8, 0x3d0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @local, [], [], 'team0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "ef08"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'macvlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"c8d3"}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 00:14:33 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x1, 0xce, &(0x7f0000000380)=""/206, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)}], 0x1}, 0x0) 00:14:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)}], 0x1}, 0x0) 00:14:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, 0x0, 0x0) 00:14:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) [ 873.754972][T13907] loop2: detected capacity change from 0 to 20 00:14:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x2, 0x5e0, 0x0, 0x0, 0x300, 0xe8, 0x3d0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @local, [], [], 'team0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "ef08"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'macvlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"c8d3"}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x640) 00:14:33 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f00000000c0), 0x10) [ 873.770396][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 873.773255][T12789] Buffer I/O error on dev loop2, logical block 0, async page read 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)}], 0x1}, 0x0) 00:14:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x19, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x8}], &(0x7f0000000380)='GPL\x00', 0x3, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 873.796677][T12789] loop2: unable to read partition table [ 873.798207][T12789] loop2: partition table beyond EOD, truncated [ 873.801479][T13907] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 873.803414][T13907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 873.805779][T13907] syz-executor.2: attempt to access beyond end of device [ 873.805779][T13907] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 00:14:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) [ 873.826882][T13907] syz-executor.2: attempt to access beyond end of device [ 873.826882][T13907] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 873.830158][T13907] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:14:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9", 0x14}], 0x1}, 0x0) 00:14:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x0, 0x0, 0x300, 0xe8, 0x3d0, 0x510, 0x510, 0x510, 0xe8, 0x510, 0x6, 0x0, {[{{@ipv6={@private0, @local, [], [], 'team0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 00:14:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3e, 0x0, 0x0) 00:14:33 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0x5}, 0x10) 00:14:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x26, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x0, 0x0, 0x2}, 0x48) 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9", 0x14}], 0x1}, 0x0) [ 873.952090][T13937] loop2: detected capacity change from 0 to 20 00:14:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x8000000, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x4}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80044501, &(0x7f0000000100)=""/4096) [ 873.965442][T13937] loop2: unable to read partition table [ 873.968400][T13937] loop2: partition table beyond EOD, truncated [ 873.970069][T13937] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 873.971870][T13937] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 873.977694][T13937] syz-executor.2: attempt to access beyond end of device [ 873.977694][T13937] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 873.993067][T13937] syz-executor.2: attempt to access beyond end of device [ 873.993067][T13937] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 00:14:33 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9", 0x14}], 0x1}, 0x0) [ 874.005283][T13937] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:14:34 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x10, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e", 0x1e}], 0x1}, 0x0) 00:14:34 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x14, 0x2e, 0x1}, 0x14}}, 0x0) 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e", 0x1e}], 0x1}, 0x0) 00:14:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, 0x0, 0x0) 00:14:34 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x1b, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 874.097285][T13955] loop2: detected capacity change from 0 to 20 00:14:34 executing program 4: bpf$MAP_CREATE(0x3, 0x0, 0x10) [ 874.105908][T13955] loop2: unable to read partition table 00:14:34 executing program 0: bpf$OBJ_GET_PROG(0x2, &(0x7f0000000440)={&(0x7f0000000400)='\x00'}, 0x10) [ 874.108792][T13955] loop2: partition table beyond EOD, truncated [ 874.113634][T13955] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 874.115508][T13955] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 874.131499][T13955] syz-executor.2: attempt to access beyond end of device [ 874.131499][T13955] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 874.134907][T13955] syz-executor.2: attempt to access beyond end of device [ 874.134907][T13955] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 874.146701][T13955] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:14:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2e, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) [ 874.198632][T12789] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:14:34 executing program 2: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x14, 0x10, 0x1}, 0x14}}, 0x0) 00:14:34 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x14}, 0x10) 00:14:34 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000010e00)="d92f381f0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010f00)="0000000000000000000000000000000000000000000000000000000026dd0ce3", 0x20, 0x400fe0}, {&(0x7f0000011000)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011300)="0000000000000006000000020c60", 0xe, 0x4012e0}, {&(0x7f0000011400)="000000000000000000000000000000000000000000080000000510ec", 0x1c, 0x401320}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000000000100000000d92f381f0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011c00)="0000000000000000000000000000000000000000000000000000000026dd0ce3", 0x20, 0x405fe0}, {0x0, 0x0, 0xc00000}], 0x0, &(0x7f0000014b00)=ANY=[]) 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e", 0x1e}], 0x1}, 0x0) 00:14:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x4, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:14:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000004200)="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", 0xffe00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 00:14:34 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34", 0x23}], 0x1}, 0x0) 00:14:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x48) [ 874.267038][T13989] loop2: detected capacity change from 0 to 20 00:14:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0xb, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:34 executing program 2: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 874.295092][T12789] loop2: unable to read partition table 00:14:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x48, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:34 executing program 3: r0 = dup(0xffffffffffffffff) write$cgroup_pid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x6c03) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 874.308001][T12789] loop2: partition table beyond EOD, truncated 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34", 0x23}], 0x1}, 0x0) 00:14:34 executing program 1: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) 00:14:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:14:34 executing program 2: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 874.390234][T14014] loop2: detected capacity change from 0 to 20 00:14:34 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x19, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34", 0x23}], 0x1}, 0x0) 00:14:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x39, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:34 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 874.423436][ T3062] loop2: unable to read partition table 00:14:34 executing program 4: bpf$MAP_CREATE(0x2, 0x0, 0xd4) [ 874.437775][ T3062] loop2: partition table beyond EOD, truncated 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a61", 0x26}], 0x1}, 0x0) 00:14:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x81, 0x2, 0x0, 0xb665, 0x0, 0x8}, 0x0, 0x1d54, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x10) [ 874.469124][T14026] loop2: detected capacity change from 0 to 20 00:14:34 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_gettime(r0, &(0x7f0000000180)) [ 874.517852][T26746] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 874.523925][T26746] Buffer I/O error on dev loop2, logical block 0, async page read [ 874.526001][T26746] ldm_validate_partition_table(): Disk read failed. [ 874.531737][T26746] Dev loop2: unable to read RDB block 0 [ 874.534027][T26746] loop2: unable to read partition table [ 874.535613][T26746] loop2: partition table beyond EOD, truncated 00:14:34 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 00:14:34 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a61", 0x26}], 0x1}, 0x0) 00:14:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1d, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:35 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:35 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a61", 0x26}], 0x1}, 0x0) 00:14:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, 0x0, 0x0) 00:14:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 00:14:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x48, 0x12, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:14:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x2, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'ipvlan0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @private2, [], [], 'dvmrp1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) [ 875.265147][T14052] loop2: detected capacity change from 0 to 20 00:14:35 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a6136", 0x27}], 0x1}, 0x0) 00:14:35 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 00:14:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x401c5820, 0x0) 00:14:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast2}, {}, {0x2, 0x0, @broadcast}, 0x202}) 00:14:35 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:35 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a6136", 0x27}], 0x1}, 0x0) [ 875.333900][T14066] loop2: detected capacity change from 0 to 20 00:14:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:35 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 00:14:35 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="398ca5d84b92d643fa16bfd8c5ffc580", 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 00:14:35 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:35 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x1, @loopback}, 0x10, 0x0}, 0x0) 00:14:35 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a6136", 0x27}], 0x1}, 0x0) 00:14:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x16, 0x0, 0x0) 00:14:35 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ipvlan0\x00'}, 0x18) 00:14:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) 00:14:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0xa, @sdr}}) [ 875.457313][T14084] IPVS: Error connecting to the multicast addr 00:14:35 executing program 4: prctl$PR_SET_MM_MAP(0x4, 0xe, 0x0, 0x0) [ 875.666319][T13924] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 876.026381][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.029136][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.031410][T13924] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 876.038034][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 876.042505][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.527011][T13924] hid-generic 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 876.529398][T13924] hid-generic 0003:0D8C:0022.0008: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 876.730963][ T7131] usb 1-1: USB disconnect, device number 21 00:14:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 00:14:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x0, 0x30}, &(0x7f0000000180)=0x18) 00:14:37 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:37 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x40305829, 0x0) 00:14:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0xc) 00:14:37 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000500), 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffb) 00:14:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000180)="5e4f386741b612c7efc1bbfa24d0589fa1b396c59281e4f0e87ac622616617c21832c65e8ce5cfa05646902aec6befb874dd24afc3259dfb82ac29868f4e4ce04f440cce42fb3e4a6dab8938aa1902134b2c531528d53807fd3881f2aa4c8cad50e13ab6d3ab25883156ea6792bbdc088af3d71adb511f254c998f4df7739a499a68d14ac2e2934a", 0x88) 00:14:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "aafe3fe20e"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:14:37 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @null, @bpq0, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 00:14:37 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x4) [ 877.328302][T14117] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 877.330427][T14117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 877.337172][T14117] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 877.339216][T14117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 877.556524][ T7131] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 877.916342][ T7131] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.919283][ T7131] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.921547][ T7131] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 877.924694][ T7131] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 877.926968][ T7131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.407003][ T7131] hid-generic 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 878.409490][ T7131] hid-generic 0003:0D8C:0022.0009: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 878.620353][T13924] usb 1-1: USB disconnect, device number 22 00:14:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, 'wg2\x00'}, 0x18) 00:14:39 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40049409, &(0x7f0000000180)) 00:14:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty=0x3}, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, 0x1ae}) [ 879.146325][T14127] loop3: detected capacity change from 0 to 98304 [ 879.149854][T14124] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 879.151967][T14124] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:14:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20a000, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r1}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x2}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'ip6gretap0\x00', 0x2}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x88, @multicast1, 0x4e22, 0x4, 'lblc\x00', 0x30, 0x0, 0x78}, {@local, 0x4e24, 0x1, 0x3, 0x401, 0x7}}, 0x44) 00:14:39 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x541b, 0x0) [ 879.173619][T14131] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20002 [ 879.179754][T14127] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:14:39 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000300)={0x2, 'geneve0\x00'}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'wg2\x00'}, 0x18) [ 879.182957][T14124] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 879.192559][T14127] gfs2: fsid=c: Now mounting FS (format 0)... [ 879.210594][T14127] gfs2: not a GFS2 filesystem [ 879.210640][T14124] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 879.212096][T14127] gfs2: fsid=c: can't read superblock [ 879.215362][T14127] gfs2: fsid=c: can't read superblock: -22 00:14:39 executing program 4: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0), 0xfffffdc5) 00:14:39 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x5421, 0x7fffffffefff) 00:14:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80) [ 879.456351][T13924] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 879.826386][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.829017][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.831606][T13924] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 879.834679][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 879.837636][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.317069][T13924] hid-generic 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 880.319552][T13924] hid-generic 0003:0D8C:0022.000A: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 880.524461][ T7131] usb 1-1: USB disconnect, device number 23 00:14:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:41 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, &(0x7f0000000180)) 00:14:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x12, 0x0, 0x0) 00:14:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:41 executing program 5: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@uid={'uid', 0x3d, 0xee01}}, {}, {@overriderock}]}) 00:14:41 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 881.046876][T14149] loop3: detected capacity change from 0 to 98304 00:14:41 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xb, &(0x7f00000018c0)=[{&(0x7f0000000080), 0x0, 0x4d8d}, {&(0x7f0000000180)}, {&(0x7f0000001180)="8f0014a770b1088a2f66ac15a5fc492b513793e7fc93e2a57af95eb3f7e1f212", 0x20}, {&(0x7f00000011c0)="e12dd6b0e5a30517aa69a2fc04de3437d70cb1de7c6494092d2c", 0x1a, 0x80000000}, {&(0x7f0000001200)}, {&(0x7f00000012c0), 0x0, 0x200}, {&(0x7f0000001300)="e4dbf3e17eb73131cfc8fbe1d251b7f3d0f6c02ad0d6c41ad008c14fd1246f", 0x1f, 0x1}, {&(0x7f0000001400)="d1f2", 0x2}, {0x0, 0x0, 0x146c}, {&(0x7f0000001740)="6a7497d802b7dac97d7a07ee992b942c51e8099d017ee7ab0f3b39075770ccd1432a07547eb8ba31428002780e0adc4789da62bc1905a501c17b43dc99", 0x3d}, {&(0x7f0000001840)="acd6dff04d14055287b08c5a72633ffbb22cde5f9541653a235f489fb5d8f3c1ace33d5a9547a783dc1d153f7d2bb7ef88", 0x31, 0x7fff}], 0x340010, &(0x7f0000001a00)={[{@mode={'mode', 0x3d, 0x4}}, {@gid}, {}, {}, {@huge_never}], [{@subj_user={'subj_user', 0x3d, ':@^'}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '!*\xc5'}}, {@appraise_type}, {@dont_appraise}, {@uid_eq}, {@fsname={'fsname', 0x3d, '{/:%#)-[\'^'}}]}) [ 881.060093][T14145] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 881.063612][T14149] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:14:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ipvlan0\x00'}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @private}, {0x2, 0x4e23}, {0x2, 0x4e23, @multicast2}, 0x85, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='geneve1\x00', 0xffffffff, 0x3, 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000640)={0x0, @rand_addr, @broadcast}, &(0x7f0000000680)=0xc) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000100)='ipvlan0\x00', 0x800, 0x1, 0x9}) [ 881.065704][T14145] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 881.072168][T14145] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 881.074190][T14149] gfs2: fsid=c: Now mounting FS (format 0)... [ 881.075683][T14145] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 881.079023][T14149] gfs2: not a GFS2 filesystem [ 881.080408][T14149] gfs2: fsid=c: can't read superblock [ 881.081961][T14149] gfs2: fsid=c: can't read superblock: -22 00:14:41 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890d, 0x0) [ 881.108358][T14158] IPVS: Error connecting to the multicast addr 00:14:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:41 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001240), 0xe2340, 0x0) [ 881.130764][T14161] loop2: detected capacity change from 0 to 20 [ 881.135383][T14161] loop2: unable to read partition table 00:14:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x6, 0x6, &(0x7f0000000040)={0x0, 'wg2\x00'}, 0x18) [ 881.142788][T14161] loop2: partition table beyond EOD, truncated [ 881.144489][T14161] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 881.150475][T14161] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 881.154913][T14161] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 881.160991][T14161] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 881.198512][T12789] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 881.326413][T13924] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 881.716436][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.719144][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.721490][T13924] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 881.724839][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 881.727221][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.207120][T13924] hid-generic 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 882.210325][T13924] hid-generic 0003:0D8C:0022.000B: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 882.414276][T13924] usb 1-1: USB disconnect, device number 24 00:14:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:14:42 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x2, 0x2) 00:14:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:14:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @link_local}}) 00:14:42 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 882.936207][T14171] loop3: detected capacity change from 0 to 98304 [ 882.941425][T14174] loop2: detected capacity change from 0 to 20 [ 882.949576][T14171] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 882.951376][T14171] gfs2: fsid=c: Now mounting FS (format 0)... 00:14:42 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000002480)=0xf4240) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000005c0)=0x1) 00:14:42 executing program 5: syz_io_uring_setup(0x206a, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x40b, &(0x7f0000000280)={0x0, 0x3188}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:14:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0xb, 0x0, 0x0) [ 882.958813][T14174] loop2: unable to read partition table [ 882.960330][T14174] loop2: partition table beyond EOD, truncated [ 882.962073][T14174] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 882.963857][T14174] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 882.976590][T14171] gfs2: not a GFS2 filesystem [ 882.977841][T14171] gfs2: fsid=c: can't read superblock [ 882.979339][T14171] gfs2: fsid=c: can't read superblock: -22 [ 882.994888][T14174] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 882.997053][T14174] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x14, &(0x7f0000000040)={0x2, 'wg2\x00'}, 0x18) 00:14:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x9}) 00:14:43 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes128\x00'}}}, 0xe0}}, 0x0) [ 883.226459][ T3112] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 883.596361][ T3112] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.599079][ T3112] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.601377][ T3112] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 883.604609][ T3112] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 883.607238][ T3112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.126442][ T3112] usbhid 1-1:8.0: can't add hid device: -71 [ 884.128137][ T3112] usbhid: probe of 1-1:8.0 failed with error -71 [ 884.133408][ T3112] usb 1-1: USB disconnect, device number 25 00:14:44 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:44 executing program 4: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003280)=[{&(0x7f0000000140)='\'', 0x1, 0xffffffff}], 0x0, 0x0) 00:14:44 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r0, 0x1}, 0x14}}, 0x0) 00:14:44 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000815) 00:14:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:14:44 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 884.575048][T14195] loop2: detected capacity change from 0 to 20 [ 884.578454][T14199] loop3: detected capacity change from 0 to 98304 00:14:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000180), 0x4) [ 884.604393][T14199] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:14:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x16, &(0x7f00000005c0), 0x4) [ 884.612070][T14199] gfs2: fsid=c: Now mounting FS (format 0)... 00:14:44 executing program 4: syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000040)) [ 884.617165][T14195] loop2: unable to read partition table [ 884.619000][T14195] loop2: partition table beyond EOD, truncated [ 884.627000][T14195] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.629114][T14195] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 884.631478][T14195] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.633466][T14195] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 884.646846][T14199] gfs2: not a GFS2 filesystem [ 884.647919][T14199] gfs2: fsid=c: can't read superblock [ 884.649108][T14199] gfs2: fsid=c: can't read superblock: -22 00:14:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_link_settings}) 00:14:44 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'wg2\x00', {0x2, 0x0, @private}}) 00:14:44 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3, 0x1}}, 0x26) 00:14:44 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360), 0x0, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 884.710291][T14219] loop2: detected capacity change from 0 to 20 [ 884.719499][ T2560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.721769][ T2560] Buffer I/O error on dev loop2, logical block 0, async page read [ 884.723816][ T2560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.726056][ T2560] Buffer I/O error on dev loop2, logical block 0, async page read 00:14:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) [ 884.736079][ T2560] loop2: unable to read partition table [ 884.746436][ T2560] loop2: partition table beyond EOD, truncated 00:14:44 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4) [ 884.752174][T14219] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.754057][T14219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:14:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)) [ 884.775075][T14219] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.789777][T14219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 884.866569][ T3112] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 885.236343][ T3112] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.238999][ T3112] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.241348][ T3112] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 885.244543][ T3112] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 885.246853][ T3112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.796355][ T3112] usbhid 1-1:8.0: can't add hid device: -71 [ 885.798244][ T3112] usbhid: probe of 1-1:8.0 failed with error -71 [ 885.800939][ T3112] usb 1-1: USB disconnect, device number 26 00:14:46 executing program 1: r0 = socket(0x26, 0x5, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 00:14:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1c3c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 00:14:46 executing program 3: syz_mount_image$gfs2(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:46 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640), 0x10) 00:14:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:14:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360), 0x0, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 886.224067][T14235] loop2: detected capacity change from 0 to 20 [ 886.228256][T14237] loop3: detected capacity change from 0 to 98304 [ 886.238341][T14235] loop2: unable to read partition table [ 886.239879][T14235] loop2: partition table beyond EOD, truncated 00:14:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) [ 886.241415][T14235] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:14:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='rose0\x00', 0x10) 00:14:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'macsec0\x00'}) [ 886.263536][T14235] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 886.265535][T14235] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:14:46 executing program 3: syz_mount_image$gfs2(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:46 executing program 5: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0x989680}, 0x0) [ 886.285654][T14235] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 886.289066][T14246] IPVS: length: 40 != 8 00:14:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x400a00, 0x38e, 0x0, 0x1}, 0x48) 00:14:46 executing program 4: syz_mount_image$msdos(&(0x7f00000001c0), 0x0, 0x0, 0x3, &(0x7f00000006c0)=[{0x0, 0x0, 0x6}, {0x0}, {0x0}], 0x0, &(0x7f0000000780)={[{@nodots}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, '\''}}, {@uid_lt}, {@fowner_gt}]}) [ 886.323320][T14252] loop3: detected capacity change from 0 to 98304 00:14:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360), 0x0, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x38) 00:14:46 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r0, &(0x7f0000001800)={&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0) [ 886.359609][T14258] loop2: detected capacity change from 0 to 20 [ 886.369638][T14258] loop2: unable to read partition table [ 886.371366][T14258] loop2: partition table beyond EOD, truncated [ 886.381981][T14258] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 886.384012][T14258] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 886.387103][T14258] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 886.393182][T14258] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 886.546480][ T3112] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 886.936367][ T3112] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.939255][ T3112] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.941584][ T3112] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 886.944760][ T3112] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 886.947521][ T3112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.476335][ T3112] usbhid 1-1:8.0: can't add hid device: -71 [ 887.477766][ T3112] usbhid: probe of 1-1:8.0 failed with error -71 [ 887.480164][ T3112] usb 1-1: USB disconnect, device number 27 00:14:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:47 executing program 3: syz_mount_image$gfs2(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:47 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000013c0)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 00:14:47 executing program 5: r0 = syz_io_uring_setup(0x56c, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x1390, 0xffffffff, 0x1100, 0x0, 0x1290, 0xffffffff, 0xffffffff, 0x1410, 0x1410, 0x1410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ipv6={@local, @dev, [], [], 'xfrm0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x3ec1, 0x4200, 0x0, 0x0, 0x0) 00:14:47 executing program 1: r0 = syz_io_uring_setup(0x56c, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x1390, 0xffffffff, 0x1100, 0x0, 0x1290, 0xffffffff, 0xffffffff, 0x1410, 0x1410, 0x1410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ipv6={@local, @dev, [], [], 'xfrm0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x3ec1, 0x4200, 0x0, 0x0, 0x0) 00:14:47 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f00000002", 0x35, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 887.923178][T14267] loop2: detected capacity change from 0 to 20 [ 887.924910][T14268] loop3: detected capacity change from 0 to 98304 00:14:47 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), 0x0, 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 887.971918][T14267] loop2: unable to read partition table [ 887.973295][T14267] loop2: partition table beyond EOD, truncated [ 887.974780][T14267] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:14:47 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000013c0)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 887.990869][T14267] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 887.992777][T14267] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 887.994457][T14267] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 887.997075][T14272] loop3: detected capacity change from 0 to 98304 00:14:48 executing program 1: r0 = syz_io_uring_setup(0x56c, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x3ec1, 0x4200, 0x0, 0x0, 0x0) 00:14:48 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000013c0)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 888.031264][T12789] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 00:14:48 executing program 5: r0 = syz_io_uring_setup(0x56c, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x3ec1, 0x4200, 0x0, 0x0, 0x0) 00:14:48 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f00000002", 0x35, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 888.059222][T12789] Buffer I/O error on dev loop3, logical block 0, async page read [ 888.064056][T12789] ldm_validate_partition_table(): Disk read failed. [ 888.068077][T12789] Dev loop3: unable to read RDB block 0 [ 888.069788][T14283] loop2: detected capacity change from 0 to 20 [ 888.071777][T12789] loop3: unable to read partition table [ 888.073388][T12789] loop3: partition table beyond EOD, truncated [ 888.080272][T14283] loop2: unable to read partition table [ 888.081802][T14283] loop2: partition table beyond EOD, truncated [ 888.089924][T14283] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 888.097486][T14283] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 888.099651][T14283] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 888.120816][T14283] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 888.256473][T13923] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 888.616355][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.619147][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.621390][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 888.624349][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 888.626463][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.176309][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 889.177858][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 889.180095][T13923] usb 1-1: USB disconnect, device number 28 00:14:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:49 executing program 4: r0 = socket(0x840000000002, 0x0, 0xff) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 00:14:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), 0x0, 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:49 executing program 5: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, "63c79bcf7f18f600"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) 00:14:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f00000002", 0x35, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 889.599940][T14289] loop2: detected capacity change from 0 to 20 [ 889.611046][T14293] loop3: detected capacity change from 0 to 98304 [ 889.617254][T14289] loop2: unable to read partition table [ 889.618700][T14289] loop2: partition table beyond EOD, truncated [ 889.620210][T14289] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 889.622042][T14289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 889.623913][T14289] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 889.625579][T14289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), 0x0, 0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 889.703751][T14309] loop3: detected capacity change from 0 to 98304 00:14:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f000000020000000200000002000000010000001800000000020000000200", 0x4f, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:49 executing program 4: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, "63c79bcf7f18f600"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) [ 889.743806][T14316] loop2: detected capacity change from 0 to 20 [ 889.750859][T14316] loop2: unable to read partition table [ 889.753707][T14316] loop2: partition table beyond EOD, truncated [ 889.756631][T14316] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 889.761952][T14316] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 889.768206][T14316] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 889.771325][T14316] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 889.906316][T13923] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 890.276412][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.279056][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.281013][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 890.283833][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 890.285832][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.826354][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 890.827987][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 890.836530][T13923] usb 1-1: USB disconnect, device number 29 00:14:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f000000020000000200000002000000010000001800000000020000000200", 0x4f, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:51 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000003e40)={0x0, 0x3938700}, &(0x7f0000003e80)) timer_create(0x0, 0x0, &(0x7f0000000200)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 00:14:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0x8847, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) [ 891.268761][T14325] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 891.270441][T14325] gfs2: fsid=c: Now mounting FS (format 0)... [ 891.273852][T14329] loop2: detected capacity change from 0 to 20 [ 891.278583][T14329] loop2: unable to read partition table [ 891.280121][T14329] loop2: partition table beyond EOD, truncated 00:14:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 891.292851][T14325] gfs2: not a GFS2 filesystem [ 891.293915][T14325] gfs2: fsid=c: can't read superblock [ 891.295074][T14325] gfs2: fsid=c: can't read superblock: -22 [ 891.297870][T14329] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 891.300132][T14329] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:14:51 executing program 1: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 891.305574][T14329] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 00:14:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 891.318354][T14329] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 891.340963][T14338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.342951][T14338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:14:51 executing program 1: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f000000020000000200000002000000010000001800000000020000000200", 0x4f, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 891.398750][T14346] loop2: detected capacity change from 0 to 20 [ 891.416552][T14346] loop2: unable to read partition table [ 891.418120][T14346] loop2: partition table beyond EOD, truncated [ 891.419769][T14346] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 891.421811][T14346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 891.423740][T14346] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 891.425678][T14346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 891.546319][T13923] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 891.906513][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.909165][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.911351][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 891.914245][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 891.916631][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.456494][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 892.458099][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 892.460328][T13923] usb 1-1: USB disconnect, device number 30 00:14:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:52 executing program 1: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:52 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000", 0x5c, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:52 executing program 5: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:52 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 892.896518][T14355] loop2: detected capacity change from 0 to 20 [ 892.896792][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.900515][T14354] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 892.902293][T14354] gfs2: fsid=c: Now mounting FS (format 0)... [ 892.907608][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.909467][T14355] loop2: unable to read partition table 00:14:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 892.911550][T14355] loop2: partition table beyond EOD, truncated [ 892.917206][T14355] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:14:52 executing program 1: r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 892.928780][T14355] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 892.934212][T14355] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 892.936087][T14354] gfs2: not a GFS2 filesystem [ 892.938444][T14355] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 892.945417][T14354] gfs2: fsid=c: can't read superblock 00:14:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 892.949721][T14354] gfs2: fsid=c: can't read superblock: -22 00:14:52 executing program 1: r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 00:14:52 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000", 0x5c, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 893.014516][T14371] loop2: detected capacity change from 0 to 20 [ 893.019160][T14371] loop2: unable to read partition table [ 893.020563][T14371] loop2: partition table beyond EOD, truncated [ 893.022102][T14371] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 893.023823][T14371] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 893.025633][T14371] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 00:14:53 executing program 1: r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:53 executing program 5: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 893.047143][T14371] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:53 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 893.061337][T14376] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 893.066662][T14376] gfs2: fsid=c: Now mounting FS (format 0)... [ 893.072862][T14376] gfs2: not a GFS2 filesystem [ 893.075143][T14376] gfs2: fsid=c: can't read superblock [ 893.084883][T14376] gfs2: fsid=c: can't read superblock: -22 00:14:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:53 executing program 1: r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:53 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000", 0x5c, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:53 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[]) 00:14:53 executing program 5: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:14:53 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 893.455125][T14386] loop2: detected capacity change from 0 to 20 [ 893.457651][T14387] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 893.465364][T14387] gfs2: fsid=c: Now mounting FS (format 0)... [ 893.467621][T14385] gfs2: not a GFS2 filesystem [ 893.468494][T14386] loop2: unable to read partition table [ 893.470087][T14386] loop2: partition table beyond EOD, truncated [ 893.471545][T14386] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 893.473297][T14386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 893.475035][T14386] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 893.475697][T14387] gfs2: not a GFS2 filesystem 00:14:53 executing program 1: r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 893.483837][T14387] gfs2: fsid=c: can't read superblock [ 893.491355][T14386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 893.493624][T14387] gfs2: fsid=c: can't read superblock: -22 [ 893.494224][T14393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.503134][T14393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:14:53 executing program 1: r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:53 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[]) 00:14:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:53 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000", 0x63, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 893.559288][T14401] loop2: detected capacity change from 0 to 20 [ 893.565140][T14398] gfs2: not a GFS2 filesystem 00:14:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 893.571957][T14401] loop2: unable to read partition table [ 893.573721][T14401] loop2: partition table beyond EOD, truncated [ 893.582373][T14401] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 893.585883][T14401] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 893.599933][T14401] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 893.601946][T14401] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5750}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x373}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "51eafa2d3e6e642be66f7f619927efc844ec26bed8de2de1b7210c7638000b9196c8fae691f11e81ed149c2968f8e854bf15827c5e7f4138f04a809ac8b27defae601e38c0b1ddf0625e7882d136c0568373b54f09d0ee8d827db727982ae2fab54d13cfa0ae3aa8a04ca66b04c427b65c412be43d0ee1edaf52e8f5df78f6f6fcc11161c38efd883bbb27d008933c3344e0d8133ffc612ebcbf4e232fc8be2a8fda2b67721e6deae4dd9d3af73884bdeccf55adfc2adbcd9ded6c88b45ca0a4e6db9cbda4bc13cab7c494ba32"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0xfc, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0xa4, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSET={0xdc, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x18, 0xd, 0x1, 0x0, "3b4862544f830f7a93e886bbd998ce17a73321ba"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xffffb387}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_DESC={0x90, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x193e}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}]}], {0x14}}, 0x454}, 0x1, 0x0, 0x0, 0x840}, 0xc88) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x2}}, 0x64}}, 0x0) 00:14:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[]) 00:14:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:54 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000", 0x63, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:54 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 894.030917][T14412] loop2: detected capacity change from 0 to 20 [ 894.039450][T14407] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 894.051640][T14411] gfs2: not a GFS2 filesystem [ 894.052096][T14412] loop2: unable to read partition table [ 894.054126][T14412] loop2: partition table beyond EOD, truncated [ 894.055524][T14412] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 894.060741][T14412] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 894.062898][T14412] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(3) 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 894.065433][T14412] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]) 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:54 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000", 0x63, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) [ 894.123216][T14423] gfs2: not a GFS2 filesystem [ 894.128494][T14425] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 894.129651][T14427] loop2: detected capacity change from 0 to 20 [ 894.135346][T26746] loop2: unable to read partition table [ 894.138198][T26746] loop2: partition table beyond EOD, truncated [ 894.140452][T14427] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 894.147374][T14427] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 894.150180][T14427] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 894.152248][T14427] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000026c0)={0x128, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_LABELS_MASK={0x14, 0x17, [0x3ac7, 0x5, 0x8001, 0x0]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x1, 0x1, 0x3a}}]}, @CTA_TUPLE_ORIG={0xd4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @rand_addr=0x64010101}, {0x0, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x41}, 0x2000000) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000000900bfeb83ed934c131cc7010073797a300000000058000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797af68d300000000008000540000000211c0009800800014000000985100002800c00018008000140000000011400000010000100"/169], 0xa0}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0000000040a000000000000000000000200000a0900030073797a3100000000080005400000000708000a400000000008000a40000000037800048014000300776731000000000000000000000000001400030069705f76746930000000000000000000140003006d6163766c616e30f9ffffff00000000080001400000000308000140000000010800024042c970b8080002400c69c4ee080001400000000208000140000000020800014000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40850}, 0x34008000) r2 = openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0xa8101, 0x0, 0x2}, 0x18) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000580)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x67}, @void, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000002400)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002240)={0x144, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x449b082c, 0x2d}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5523861c7552"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_DISABLE_HT={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x67, 0xfc, "2fce3716193bbd4e9475006f45e03f9d2ad56b167f4faaeb8f1473d71e07378e5efcca8d37f9da85e9a9933f2398bf46212e5285d6afbce369bbfe251eec92e7f923145eb97b4e1d9df219a8b781fc370bb499fc57ca35c820d3d2ce9a9ff11926f2a2"}, @NL80211_ATTR_FILS_ERP_RRK={0x8b, 0xfc, "11b39cf2a17edf4587157ea5b221a66204330286a21003c490722e8dce062fd5486f8119888c41a48d688c14fc0c07751258f5897928e07ff44ee02fbc25b51584b3b80e3c5ef002d9cc9da2efc1ca1d2e6ae2e3f545bc683b3178e502cd9b009a8c99ec743be1a7110bc5949fd02be0925b1967dfdff2e4bfd43b6bf1e8a59143443838210bcf"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}]]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000002540)=@req={0x28, &(0x7f0000002500)={'vcan0\x00', @ifru_names='veth0_to_bridge\x00'}}) 00:14:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]) 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 894.187438][T14433] gfs2: not a GFS2 filesystem [ 894.188270][T14432] __nla_validate_parse: 9 callbacks suppressed [ 894.188279][T14432] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 894.201016][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]) 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 894.227253][T14437] gfs2: not a GFS2 filesystem 00:14:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:54 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100", 0x66, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x20000, 0x5a) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x4601a7720bb362a, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xcc}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x801c) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="13fce6223d65dc3296828e6404fd519fa2", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf25760000000c00580043000000000000000c00580010000000000000000c00580012000000000000000c0058004c000000000000000c00580043000000000000000c00580025000000000000000c0058007b00000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x55, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x2400c845}, 0x4800) 00:14:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_no']) [ 894.556114][T14447] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 894.560138][T14449] loop2: detected capacity change from 0 to 20 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 894.571130][T14449] loop2: unable to read partition table [ 894.572795][T14449] loop2: partition table beyond EOD, truncated [ 894.573803][T14445] gfs2: not a GFS2 filesystem [ 894.577652][T14449] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 894.579758][T14449] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 894.581852][T14449] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 894.583797][T14449] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:14:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000000900010073797a300000000058000000090a010400000000000000000200000008000a40000000000900020073e2a48f610000000900010073797a300000000008000540000000211c00098008800800014000000001140000001000010000000000000000000000000a5f9729c47d161fbca9db837f265b1a4f650e530cbfc8a684b930b0e994aabf1c584954058a9a73c56cda42b6715f467b53f124d9462a4c5367de5a98e1bd0dc4bf9bc8b6a15567e53af6ecdcafbff41b11468fe7152155f1e84d9ff7b0c9f9abf051dc400076a9b95dba6e947b586f4ded4047aee3d8d0b91dbfcaa26aed54ea0d5be06a8809d38627408a718e45e3d1a2337bab03c4de26e3c386c5e1ba8d13cd859da67295585de7495a37acde205ee9a4615b574489c6ec2aa8ed6d94910a91a352c5b74d5857f629470e44ce597ea860a9d4b40b06b8118d00b503b0a1c4a24ca40a6a320726529b3998a0c71b186fdee79dbb8f06"], 0xa0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfae0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xbe}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x20002000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2c}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x94}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40050) 00:14:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_no']) [ 894.614280][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:54 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 894.650242][T14461] gfs2: not a GFS2 filesystem 00:14:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:55 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:55 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100", 0x66, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_no']) 00:14:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 00:14:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x148, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x134, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6={0x74, 0x3, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x90c}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @loopback}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @loopback}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0xe52}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @private2}]}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY_OPTS={0x30, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_VXLAN={0x2c, 0x1, 0x0, 0x1, [@NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x8d5e}]}}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY_IP={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @multicast2}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @multicast2}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @broadcast}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @rand_addr=0x64010101}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @loopback}, @NFTA_TUNNEL_KEY_IP_SRC={0x8, 0x1, 0x1, 0x0, @remote}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @broadcast}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @private=0xa010101}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @multicast1}, @NFTA_TUNNEL_KEY_IP_DST={0x8, 0x2, 0x1, 0x0, @local}]}, @NFTA_TUNNEL_KEY_OPTS={0x10, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_ERSPAN={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ERSPAN_VERSION={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0x7f}]}}, @NFT_MSG_DELSET={0x17c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x160, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe7}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa9}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf5}]}}}, {0x68, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x58, 0x8, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x3b, 0x7, 0x1, 0x0, "f965540139c3c67c9b91f7ebcd45ed38356c4767e66a1ed8edaf45283dd28223a5c1304df36c9bc813bdf33fbbfacf00eed1c6004b2b7e"}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}]}, @NFT_MSG_NEWRULE={0x2d8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x66, 0x7, 0x1, 0x0, "53ae7240561993c611c545ab42b9a341ee6e35f30ee92b9fc74dceeb50cf4ddd72f7384cef2ac2c5359370b2cbe0f335317d1016927e178a354ad2a8b23bc74a3ed909496c6ad46f6a2e34030fbcc74495f44adebdddb4485fb149e2f47ecadaaf3b"}, @NFTA_RULE_EXPRESSIONS={0x170, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0xac, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x78, 0x3, "d57c78653ba7bcc774ed3c3f944c0d4db4a09ef28f538af7475c58aeeebb722fa1e5490ce3f833e92fc0b0563ca73bf1302f1415f05ce70ddfc744b808056cb2f8abaa074a196b19835fac638b10a06ae5a1129e68b2c05c66bc6fb2fe6848711986760d6979a2d98c4fa33bd0daec40e18a199c"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'pimreg\x00'}, @NFTA_TARGET_NAME={0xb, 0x1, 'pimreg\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0xc7, 0x7, 0x1, 0x0, "6d4cee64fe9b783dadc930eeb8986c32e57d2b17ed259465b971739167b915ab3de1ffb7adcba60cdb292cfa17fdb0006fecd7d1d0995a4c73573d9ca7046e93d8040c05adb4d092a86dbb2c67ab4178ffb474ef3b896f6620f2c2a08ccf9bdc2f0107980c615faaa8aa7d68b720da4439a4fda9e914448c010a6547cad977b999f32d92b506a3d0b80b14a9abacc6b82b8aec76cebea95b7b2e983f8c0c216757f5226cb0ddf1032f7f5bdd494859f324692c3574f74ff168cae645bd866547cb9c33"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x660}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'pimreg\x00', 0x1000}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x985}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) [ 895.091195][T14467] loop2: detected capacity change from 0 to 20 [ 895.092986][T14471] gfs2: not a GFS2 filesystem [ 895.095305][T14467] loop2: unable to read partition table [ 895.100831][T14467] loop2: partition table beyond EOD, truncated [ 895.104700][T14467] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:14:55 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 895.115450][T14467] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 895.118067][T14467] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 895.120097][T14467] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 00:14:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,loc']) 00:14:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:55 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100", 0x66, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 895.169039][T14484] gfs2: Unknown parameter 'loc' [ 895.182978][T14487] loop2: detected capacity change from 0 to 20 [ 895.192619][T14487] loop2: unable to read partition table [ 895.194127][T14487] loop2: partition table beyond EOD, truncated [ 895.213627][T14487] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 895.217107][T14487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 895.219258][T14487] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 895.229850][T14487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 895.267055][T12789] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:14:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,loc']) 00:14:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0xefffffff, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:14:55 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000001000000300000001000000", 0x68, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 895.629948][T14498] gfs2: Unknown parameter 'loc' [ 895.631549][T14499] loop2: detected capacity change from 0 to 20 [ 895.641466][T14499] loop2: unable to read partition table [ 895.643083][T14499] loop2: partition table beyond EOD, truncated [ 895.645737][T14499] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 895.648330][T14499] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:14:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) [ 895.655220][T14499] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) 00:14:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 895.657417][T14499] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,loc']) 00:14:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:14:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 895.702880][T14511] gfs2: Unknown parameter 'loc' 00:14:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:56 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000001000000300000001000000", 0x68, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x26}}, 0x0) 00:14:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x63f, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:14:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktab']) 00:14:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 896.171320][T14525] loop2: detected capacity change from 0 to 20 [ 896.174220][T14523] gfs2: Unknown parameter 'locktab' 00:14:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x26}}, 0x0) 00:14:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 896.183874][T14525] loop2: unable to read partition table [ 896.185287][T14525] loop2: partition table beyond EOD, truncated [ 896.199332][T14525] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 896.201195][T14525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 896.203021][T14525] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 896.204823][T14525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktab']) 00:14:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x500, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x2}}, 0x64}}, 0x0) [ 896.234462][T14531] gfs2: Unknown parameter 'locktab' 00:14:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x26}}, 0x0) 00:14:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 896.446346][T13923] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 896.636318][T13923] usb 1-1: device descriptor read/64, error 18 [ 896.906362][T13923] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 897.106325][T13923] usb 1-1: device descriptor read/64, error 18 [ 897.226517][T13923] usb usb1-port1: attempt power cycle [ 897.636311][T13923] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 897.806482][T13923] usb 1-1: device descriptor read/8, error -61 [ 898.076704][T13923] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 898.247172][T13923] usb 1-1: device descriptor read/8, error -61 [ 898.367124][T13923] usb usb1-port1: unable to enumerate USB device 00:14:59 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:14:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktab']) 00:14:59 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e0000001000000300000001000000", 0x68, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:14:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:14:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x985}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0xa0}, 0x1, 0xefffffff}, 0x0) 00:14:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[], 0x26}}, 0x0) [ 899.176176][T14546] loop2: detected capacity change from 0 to 20 [ 899.181068][T14549] gfs2: Unknown parameter 'locktab' [ 899.190040][T14546] loop2: unable to read partition table [ 899.191744][T14546] loop2: partition table beyond EOD, truncated [ 899.197408][T14546] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:14:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 899.199326][T14546] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 899.204637][T14546] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) 00:14:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[], 0x26}}, 0x0) [ 899.211982][T14546] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:14:59 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) (fail_nth: 1) 00:14:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 00:14:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable']) [ 899.241838][T14557] gfs2: Bad value for 'locktable' [ 899.247835][T14559] FAULT_INJECTION: forcing a failure. [ 899.247835][T14559] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:14:59 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 899.276191][T14559] CPU: 1 PID: 14559 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 899.278617][T14559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 899.280976][T14559] Call trace: [ 899.281746][T14559] dump_backtrace+0x1b0/0x1dc [ 899.282880][T14559] show_stack+0x2c/0x64 [ 899.283854][T14559] dump_stack_lvl+0x104/0x16c [ 899.284978][T14559] dump_stack+0x1c/0x58 [ 899.286016][T14559] should_fail+0x1c4/0x1d8 [ 899.287013][T14559] should_fail_usercopy+0x20/0x30 [ 899.288108][T14559] copy_msghdr_from_user+0x64/0x2d0 [ 899.289376][T14559] __sys_sendmsg+0x14c/0x228 [ 899.290548][T14559] __arm64_sys_sendmsg+0x2c/0x3c [ 899.291739][T14559] el0_svc_common+0x138/0x220 [ 899.292891][T14559] do_el0_svc+0x48/0x154 [ 899.293945][T14559] el0_svc+0x58/0x150 [ 899.294901][T14559] el0t_64_sync_handler+0x84/0xf0 [ 899.296097][T14559] el0t_64_sync+0x18c/0x190 [ 899.310907][T14563] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 899.312887][T14563] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 899.315490][T14563] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 899.320585][T14563] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 899.626425][T13923] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 899.836417][T13923] usb 1-1: device descriptor read/64, error 18 [ 900.106318][T13923] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 900.316337][T13923] usb 1-1: device descriptor read/64, error 18 [ 900.446416][T13923] usb usb1-port1: attempt power cycle [ 900.876309][T13923] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 901.066425][T13923] usb 1-1: device descriptor read/8, error -61 [ 901.336289][T13923] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 901.516372][T13923] usb 1-1: device descriptor read/8, error -61 [ 901.636404][T13923] usb usb1-port1: unable to enumerate USB device 00:15:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable']) 00:15:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 00:15:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[], 0x26}}, 0x0) 00:15:02 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) (fail_nth: 2) 00:15:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) [ 902.208640][T14571] gfs2: Bad value for 'locktable' [ 902.208736][T14569] FAULT_INJECTION: forcing a failure. [ 902.208736][T14569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.215288][T14570] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 902.217952][T14570] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 902.218912][T14569] CPU: 0 PID: 14569 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 902.222393][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 902.224806][T14569] Call trace: [ 902.225572][T14569] dump_backtrace+0x1b0/0x1dc [ 902.226637][T14569] show_stack+0x2c/0x64 [ 902.227663][T14569] dump_stack_lvl+0x104/0x16c [ 902.228760][T14569] dump_stack+0x1c/0x58 [ 902.229551][T14570] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 902.229776][T14569] should_fail+0x1c4/0x1d8 [ 902.232720][T14570] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 902.232720][T14569] should_fail_usercopy+0x20/0x30 [ 902.235849][T14569] move_addr_to_kernel+0xa0/0x1e4 00:15:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 902.237041][T14569] copy_msghdr_from_user+0x298/0x2d0 [ 902.238335][T14569] __sys_sendmsg+0x14c/0x228 [ 902.239450][T14569] __arm64_sys_sendmsg+0x2c/0x3c [ 902.240669][T14569] el0_svc_common+0x138/0x220 [ 902.241807][T14569] do_el0_svc+0x48/0x154 [ 902.242844][T14569] el0_svc+0x58/0x150 [ 902.243851][T14569] el0t_64_sync_handler+0x84/0xf0 [ 902.245100][T14569] el0t_64_sync+0x18c/0x190 00:15:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB], 0x26}}, 0x0) 00:15:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 00:15:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable']) 00:15:02 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) (fail_nth: 3) 00:15:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB], 0x26}}, 0x0) [ 902.319024][T14585] FAULT_INJECTION: forcing a failure. [ 902.319024][T14585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.320816][T14586] gfs2: Bad value for 'locktable' [ 902.335815][T14585] CPU: 1 PID: 14585 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 902.338265][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 902.340686][T14585] Call trace: [ 902.341500][T14585] dump_backtrace+0x1b0/0x1dc [ 902.342608][T14585] show_stack+0x2c/0x64 [ 902.343585][T14585] dump_stack_lvl+0x104/0x16c [ 902.344729][T14585] dump_stack+0x1c/0x58 [ 902.345727][T14585] should_fail+0x1c4/0x1d8 [ 902.346780][T14585] should_fail_usercopy+0x20/0x30 [ 902.347956][T14585] iovec_from_user+0xcc/0x47c [ 902.349005][T14585] __import_iovec+0x60/0x248 [ 902.350104][T14585] import_iovec+0x6c/0x88 [ 902.351141][T14585] copy_msghdr_from_user+0x238/0x2d0 [ 902.352500][T14585] __sys_sendmsg+0x14c/0x228 [ 902.353564][T14585] __arm64_sys_sendmsg+0x2c/0x3c [ 902.354784][T14585] el0_svc_common+0x138/0x220 [ 902.355875][T14585] do_el0_svc+0x48/0x154 [ 902.356837][T14585] el0_svc+0x58/0x150 [ 902.357792][T14585] el0t_64_sync_handler+0x84/0xf0 [ 902.358950][T14585] el0t_64_sync+0x18c/0x190 [ 902.676434][ T6450] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 902.866326][ T6450] usb 1-1: device descriptor read/64, error 18 [ 903.136463][ T6450] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 903.326300][ T6450] usb 1-1: device descriptor read/64, error 18 [ 903.446537][ T6450] usb usb1-port1: attempt power cycle [ 903.866281][ T6450] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 904.036345][ T6450] usb 1-1: device descriptor read/8, error -61 [ 904.316388][ T6450] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 904.486458][ T6450] usb 1-1: device descriptor read/8, error -61 [ 904.616398][ T6450] usb usb1-port1: unable to enumerate USB device 00:15:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:05 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) 00:15:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 00:15:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=']) 00:15:05 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) (fail_nth: 4) 00:15:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB], 0x26}}, 0x0) [ 905.231850][T14594] FAULT_INJECTION: forcing a failure. [ 905.231850][T14594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.235043][T14594] CPU: 0 PID: 14594 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 905.237432][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 905.239856][T14594] Call trace: [ 905.240635][T14594] dump_backtrace+0x1b0/0x1dc [ 905.241798][T14594] show_stack+0x2c/0x64 [ 905.242768][T14594] dump_stack_lvl+0x104/0x16c [ 905.243811][T14594] dump_stack+0x1c/0x58 [ 905.244774][T14594] should_fail+0x1c4/0x1d8 [ 905.245893][T14594] should_fail_usercopy+0x20/0x30 [ 905.247099][T14594] simple_read_from_buffer+0xc0/0x1dc [ 905.248344][T14594] proc_fail_nth_read+0xf4/0x154 [ 905.249477][T14594] vfs_read+0x19c/0x448 [ 905.250501][T14594] ksys_read+0xb4/0x160 [ 905.251464][T14594] __arm64_sys_read+0x24/0x34 [ 905.252619][T14594] el0_svc_common+0x138/0x220 [ 905.253673][T14594] do_el0_svc+0x48/0x154 [ 905.254650][T14594] el0_svc+0x58/0x150 [ 905.255737][T14594] el0t_64_sync_handler+0x84/0xf0 00:15:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18"], 0x26}}, 0x0) [ 905.256898][T14594] el0t_64_sync+0x18c/0x190 [ 905.261338][T14595] gfs2: Bad value for 'locktable' [ 905.264293][T14601] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:05 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 905.273827][T14601] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 905.279012][T14601] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 905.284029][T14601] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:15:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18"], 0x26}}, 0x0) 00:15:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=']) 00:15:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 00:15:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18"], 0x26}}, 0x0) [ 905.346019][T14613] gfs2: Bad value for 'locktable' [ 905.706382][T13923] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 905.896446][T13923] usb 1-1: device descriptor read/64, error 18 [ 906.166310][T13923] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 906.356313][T13923] usb 1-1: device descriptor read/64, error 18 [ 906.477120][T13923] usb usb1-port1: attempt power cycle [ 906.896297][T13923] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 907.086326][T13923] usb 1-1: device descriptor read/8, error -61 [ 907.376332][T13923] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 907.566417][T13923] usb 1-1: device descriptor read/8, error -61 [ 907.696448][T13923] usb usb1-port1: unable to enumerate USB device 00:15:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:08 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 00:15:08 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x2, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:15:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000000"], 0x26}}, 0x0) 00:15:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=']) [ 908.269420][T14623] gfs2: Bad value for 'locktable' [ 908.272615][T14624] loop2: detected capacity change from 0 to 20 00:15:08 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x3, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:08 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 00:15:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000000"], 0x26}}, 0x0) [ 908.301734][ T3062] loop2: unable to read partition table [ 908.305962][ T3062] loop2: partition table beyond EOD, truncated 00:15:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:15:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 1) 00:15:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 2) [ 908.383837][T14637] loop2: detected capacity change from 0 to 20 [ 908.385544][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 908.390476][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 908.395020][T14638] FAULT_INJECTION: forcing a failure. [ 908.395020][T14638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.406607][T14638] CPU: 0 PID: 14638 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 908.408145][T12789] loop2: unable to read partition table [ 908.409095][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 908.409103][T14638] Call trace: [ 908.409105][T14638] dump_backtrace+0x1b0/0x1dc [ 908.409117][T14638] show_stack+0x2c/0x64 [ 908.410600][T12789] loop2: partition table beyond EOD, [ 908.412664][T14638] dump_stack_lvl+0x104/0x16c [ 908.412677][T14638] dump_stack+0x1c/0x58 [ 908.412684][T14638] should_fail+0x1c4/0x1d8 [ 908.413530][T12789] truncated [ 908.414322][T14638] should_fail_usercopy+0x20/0x30 [ 908.421449][T14638] __arm64_sys_memfd_create+0x134/0x3ac [ 908.422770][T14638] el0_svc_common+0x138/0x220 [ 908.423872][T14638] do_el0_svc+0x48/0x154 [ 908.424949][T14638] el0_svc+0x58/0x150 [ 908.425789][T14638] el0t_64_sync_handler+0x84/0xf0 [ 908.426991][T14638] el0t_64_sync+0x18c/0x190 [ 908.756296][ T3504] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 908.946324][ T3504] usb 1-1: device descriptor read/64, error 18 [ 909.216285][ T3504] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 909.406497][ T3504] usb 1-1: device descriptor read/64, error 18 [ 909.526402][ T3504] usb usb1-port1: attempt power cycle [ 909.946303][ T3504] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 910.136339][ T3504] usb 1-1: device descriptor read/8, error -61 [ 910.406484][ T3504] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 910.586422][ T3504] usb 1-1: device descriptor read/8, error -61 [ 910.706413][ T3504] usb usb1-port1: unable to enumerate USB device 00:15:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:11 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x4, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:15:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 00:15:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000000"], 0x26}}, 0x0) 00:15:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 3) [ 911.298099][T14647] loop2: detected capacity change from 0 to 20 [ 911.312049][ T2560] loop2: unable to read partition table [ 911.313539][ T2560] loop2: partition table beyond EOD, truncated 00:15:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 4) 00:15:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b49"], 0x26}}, 0x0) 00:15:11 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x5, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[]) 00:15:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:15:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 5) [ 911.352772][T14657] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 00:15:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b49"], 0x26}}, 0x0) [ 911.388247][T14664] loop2: detected capacity change from 0 to 20 [ 911.394992][T14664] loop2: unable to read partition table [ 911.398379][T14664] loop2: partition table beyond EOD, truncated [ 911.400093][T14664] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 911.401927][T14664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 911.404598][T14664] syz-executor.2: attempt to access beyond end of device [ 911.404598][T14664] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 911.408471][T14664] syz-executor.2: attempt to access beyond end of device [ 911.408471][T14664] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 911.411745][T14664] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 911.456742][T12789] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 911.766498][ T3504] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 911.976317][ T3504] usb 1-1: device descriptor read/64, error 18 [ 912.266279][ T3504] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 912.456301][ T3504] usb 1-1: device descriptor read/64, error 18 [ 912.576378][ T3504] usb usb1-port1: attempt power cycle [ 912.986306][ T3504] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 913.166386][ T3504] usb 1-1: device descriptor read/8, error -61 [ 913.436373][ T3504] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 913.636351][ T3504] usb 1-1: device descriptor read/8, error -61 [ 913.765459][ T3504] usb usb1-port1: unable to enumerate USB device 00:15:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:14 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x6, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) 00:15:14 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 6) 00:15:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b49"], 0x26}}, 0x0) 00:15:14 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[]) [ 914.321268][T14672] loop2: detected capacity change from 0 to 20 [ 914.327325][T14674] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 914.332641][T14672] loop2: unable to read partition table 00:15:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b4900"], 0x26}}, 0x0) [ 914.344134][T14672] loop2: partition table beyond EOD, truncated [ 914.345676][T14672] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:14 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 7) [ 914.348827][T14672] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:14 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x7, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x14, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) [ 914.366669][T14672] syz-executor.2: attempt to access beyond end of device [ 914.366669][T14672] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 914.369910][T14672] syz-executor.2: attempt to access beyond end of device [ 914.369910][T14672] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 914.373164][T14672] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 914.385678][T14682] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 00:15:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b4900"], 0x26}}, 0x0) 00:15:14 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x8, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 914.766401][ T7131] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 915.156321][ T7131] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 915.158724][ T7131] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 915.160794][ T7131] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 915.162764][ T7131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.777827][T13924] usb 1-1: USB disconnect, device number 55 00:15:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:15 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 8) 00:15:15 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[]) 00:15:15 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x9, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b4900"], 0x26}}, 0x0) 00:15:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x84}}, 0x0) [ 915.802373][T14797] loop2: detected capacity change from 0 to 20 [ 915.814421][T14797] loop2: unable to read partition table 00:15:15 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 9) [ 915.817409][T14797] loop2: partition table beyond EOD, truncated 00:15:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) (fail_nth: 1) 00:15:15 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x11, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x84}}, 0x0) [ 915.842795][T14797] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 915.847658][T14806] ERROR: Out of memory at tomoyo_realpath_from_path. 00:15:15 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0x25, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 915.859780][T14806] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 915.861591][T14797] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 915.864439][T14797] syz-executor.2: attempt to access beyond end of device [ 915.864439][T14797] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 915.866166][T14806] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 915.872808][T14806] gfs2: not a GFS2 filesystem [ 915.874245][T14806] gfs2: fsid=c: can't read superblock [ 915.875728][T14806] gfs2: fsid=c: can't read superblock: -22 [ 915.895235][T14797] syz-executor.2: attempt to access beyond end of device [ 915.895235][T14797] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 915.923409][T14797] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 916.196293][T13924] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 916.566327][T13924] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 916.568689][T13924] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 916.570728][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 916.572740][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.188261][ T3503] usb 1-1: USB disconnect, device number 56 00:15:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x84}}, 0x0) 00:15:17 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:17 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 10) 00:15:17 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB]) [ 917.206804][T14923] loop2: detected capacity change from 0 to 20 [ 917.214599][T14923] loop2: unable to read partition table 00:15:17 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 917.226518][T14923] loop2: partition table beyond EOD, truncated [ 917.227943][T14923] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 917.229690][T14923] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 917.231823][T14923] syz-executor.2: attempt to access beyond end of device 00:15:17 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 11) [ 917.231823][T14923] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 00:15:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x4, 0x8}]}], {0x14, 0x10}}, 0x88}}, 0x0) [ 917.262772][T14933] FAULT_INJECTION: forcing a failure. [ 917.262772][T14933] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:15:17 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x3, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 917.267574][T14923] syz-executor.2: attempt to access beyond end of device [ 917.267574][T14923] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 917.271459][T14933] CPU: 1 PID: 14933 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 917.275546][T14933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 917.277323][T14923] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 917.277852][T14933] Call trace: [ 917.277857][T14933] dump_backtrace+0x1b0/0x1dc [ 917.281257][T14933] show_stack+0x2c/0x64 [ 917.282228][T14933] dump_stack_lvl+0x104/0x16c [ 917.283345][T14933] dump_stack+0x1c/0x58 [ 917.284455][T14933] should_fail+0x1c4/0x1d8 [ 917.285548][T14933] should_fail_usercopy+0x20/0x30 [ 917.286801][T14933] strncpy_from_user+0x44/0x400 [ 917.288009][T14933] getname_flags+0x84/0x278 [ 917.289135][T14933] getname+0x28/0x38 [ 917.290092][T14933] do_sys_openat2+0x78/0x22c [ 917.291218][T14933] __arm64_sys_openat+0xb0/0xe0 [ 917.292366][T14933] el0_svc_common+0x138/0x220 [ 917.293505][T14933] do_el0_svc+0x48/0x154 [ 917.294533][T14933] el0_svc+0x58/0x150 [ 917.295463][T14933] el0t_64_sync_handler+0x84/0xf0 [ 917.296622][T14933] el0t_64_sync+0x18c/0x190 00:15:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 917.315243][T14938] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 917.656332][ T3503] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 918.026289][ T3503] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 918.029174][ T3503] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 918.031208][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 918.033155][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.663535][ T7131] usb 1-1: USB disconnect, device number 57 00:15:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x4, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 12) 00:15:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x4, 0x8}]}], {0x14, 0x10}}, 0x88}}, 0x0) 00:15:18 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB]) [ 918.678674][T15049] loop2: detected capacity change from 0 to 20 [ 918.680726][T15050] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 918.689802][T15049] loop2: unable to read partition table [ 918.691267][T15049] loop2: partition table beyond EOD, truncated 00:15:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x5, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 918.692807][T15049] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 13) 00:15:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 918.707497][T15049] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x4, 0x8}]}], {0x14, 0x10}}, 0x88}}, 0x0) [ 918.722789][T15049] syz-executor.2: attempt to access beyond end of device [ 918.722789][T15049] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 918.733794][T15049] syz-executor.2: attempt to access beyond end of device [ 918.733794][T15049] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 918.746074][T15061] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 00:15:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x6, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 918.752645][T15049] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:15:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 14) [ 918.793095][T15065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 918.805182][T15065] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 918.813605][T15065] gfs2: fsid=c: Now mounting FS (format 0)... [ 918.816654][T15065] gfs2: not a GFS2 filesystem [ 918.817976][T15065] gfs2: fsid=c: can't read superblock [ 918.819261][T15065] gfs2: fsid=c: can't read superblock: -22 [ 919.146286][ T7131] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 919.546447][ T7131] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 919.548999][ T7131] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 919.551945][ T7131] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 919.554035][ T7131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.597549][ T7131] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 920.188144][T13923] usb 1-1: USB disconnect, device number 58 00:15:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:20 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB]) 00:15:20 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x7, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:20 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 15) [ 920.209550][T15175] loop2: detected capacity change from 0 to 20 [ 920.211130][T15176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 920.217434][T15175] loop2: unable to read partition table [ 920.219021][T15175] loop2: partition table beyond EOD, truncated [ 920.221081][T15175] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 920.227513][T15176] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 920.229992][T15175] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:20 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x8, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 920.239821][T15175] syz-executor.2: attempt to access beyond end of device [ 920.239821][T15175] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 920.240907][T15176] gfs2: fsid=c: Now mounting FS (format 0)... [ 920.245506][T15175] syz-executor.2: attempt to access beyond end of device [ 920.245506][T15175] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 920.251980][T15175] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 920.252693][T15176] gfs2: not a GFS2 filesystem [ 920.255985][T15176] gfs2: fsid=c: can't read superblock 00:15:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 920.262315][T15176] gfs2: fsid=c: can't read superblock: -22 00:15:20 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x9, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) 00:15:20 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_f']) 00:15:20 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xa, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 920.335790][T15194] loop2: detected capacity change from 0 to 20 00:15:20 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 16) [ 920.341261][T15194] loop2: unable to read partition table 00:15:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 920.346205][T15194] loop2: partition table beyond EOD, truncated [ 920.350797][T15194] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 920.355157][T15194] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 920.361956][T15198] ERROR: Out of memory at tomoyo_realpath_from_path. [ 920.374037][T15194] F2FS-fs (loop2): Unrecognized mount option "disable_roll_f" or missing value [ 920.394510][T15198] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 920.396727][T15198] gfs2: fsid=c: Now mounting FS (format 0)... [ 920.404806][T15198] gfs2: not a GFS2 filesystem [ 920.405917][T15198] gfs2: fsid=c: can't read superblock [ 920.411764][T15198] gfs2: fsid=c: can't read superblock: -22 [ 920.636433][T13923] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 921.006368][T13923] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 921.008955][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 921.012039][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 921.014088][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.057669][T13923] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 921.637816][ T6450] usb 1-1: USB disconnect, device number 59 00:15:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:21 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xb, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) 00:15:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:21 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_f']) 00:15:21 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 17) [ 921.654236][T15311] loop2: detected capacity change from 0 to 20 [ 921.658468][T15312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 921.662053][T15311] loop2: unable to read partition table [ 921.663432][T15311] loop2: partition table beyond EOD, truncated [ 921.664852][T15311] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 921.675633][T15312] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:15:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 921.677487][T15311] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 921.679467][T15312] gfs2: fsid=c: Now mounting FS (format 0)... [ 921.681092][T15311] F2FS-fs (loop2): Unrecognized mount option "disable_roll_f" or missing value [ 921.683633][T15312] gfs2: not a GFS2 filesystem 00:15:21 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xc, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 921.687279][T15312] gfs2: fsid=c: can't read superblock [ 921.688628][T15312] gfs2: fsid=c: can't read superblock: -22 00:15:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) 00:15:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:21 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xd, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 922.096431][ T6450] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 922.476383][ T6450] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 922.478814][ T6450] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 922.481757][ T6450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 922.483808][ T6450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.527454][ T6450] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 923.109263][ T3503] usb 1-1: USB disconnect, device number 60 00:15:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:23 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_f']) 00:15:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:23 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 18) 00:15:23 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xe, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 923.123033][T15437] loop2: detected capacity change from 0 to 20 [ 923.131341][T15442] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 923.133198][T15442] gfs2: fsid=c: Now mounting FS (format 0)... [ 923.142020][T15437] loop2: unable to read partition table [ 923.143533][T15437] loop2: partition table beyond EOD, truncated [ 923.144966][T15437] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 923.147288][T15442] gfs2: not a GFS2 filesystem [ 923.148484][T15437] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:23 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x10, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 923.158765][T15442] gfs2: fsid=c: can't read superblock [ 923.161174][T15437] F2FS-fs (loop2): Unrecognized mount option "disable_roll_f" or missing value [ 923.162436][T15442] gfs2: fsid=c: can't read superblock: -22 00:15:23 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x11, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:23 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 19) [ 923.248035][T15457] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 923.249787][T15457] gfs2: fsid=c: Now mounting FS (format 0)... [ 923.253314][T15457] gfs2: not a GFS2 filesystem [ 923.254330][T15457] gfs2: fsid=c: can't read superblock [ 923.255479][T15457] gfs2: fsid=c: can't read superblock: -22 [ 923.526423][ T3503] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 923.936322][ T3503] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 923.938850][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 923.941779][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 923.943794][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.987455][ T3503] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 924.570443][ T3503] usb 1-1: USB disconnect, device number 61 00:15:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noin']) 00:15:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x12, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:24 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 20) [ 924.585275][T15564] loop2: detected capacity change from 0 to 20 [ 924.600299][T15564] loop2: unable to read partition table [ 924.601359][T15568] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 924.601830][T15564] loop2: partition table beyond EOD, truncated 00:15:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) [ 924.607197][T15564] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 924.611432][T15564] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 924.616574][T15564] F2FS-fs (loop2): Unrecognized mount option "noin" or missing value [ 924.618298][T15568] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x25, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 924.625065][T15568] gfs2: not a GFS2 filesystem [ 924.626619][T15568] gfs2: fsid=c: can't read superblock [ 924.627956][T15568] gfs2: fsid=c: can't read superblock: -22 [ 924.637611][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.639024][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 00:15:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x48, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) [ 925.036458][ T3503] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 925.406424][ T3503] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 925.408903][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 925.411940][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 925.413910][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.457522][ T3503] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 926.038617][ T7131] usb 1-1: USB disconnect, device number 62 00:15:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noin']) 00:15:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:26 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x4c, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 00:15:26 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 21) [ 926.060542][T15691] loop2: detected capacity change from 0 to 20 [ 926.062227][T15692] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:15:26 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x68, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 926.071091][T15692] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf56, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 926.081310][T15691] loop2: unable to read partition table [ 926.082859][T15691] loop2: partition table beyond EOD, truncated [ 926.085632][T15691] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 926.088271][T15691] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 926.089646][T15692] gfs2: not a GFS2 filesystem [ 926.091322][T15692] gfs2: fsid=c: can't read superblock [ 926.094786][T15691] F2FS-fs (loop2): Unrecognized mount option "noin" or missing value [ 926.100911][T15692] gfs2: fsid=c: can't read superblock: -22 00:15:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 00:15:26 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x6c, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x4788, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:26 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x74, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 926.496338][ T7131] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 926.866328][ T7131] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 926.868708][ T7131] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 926.871197][ T7131] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 926.873105][ T7131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.917612][ T7131] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 927.501847][T13923] usb 1-1: USB disconnect, device number 63 00:15:27 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 22) 00:15:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x4888, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:27 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noin']) 00:15:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 00:15:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:27 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x7a, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 927.520762][T15814] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 927.522433][T15817] loop2: detected capacity change from 0 to 20 [ 927.528978][T15814] gfs2: fsid=c: Now mounting FS (format 0)... [ 927.531408][T15817] loop2: unable to read partition table 00:15:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x560f, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 927.532846][T15817] loop2: partition table beyond EOD, truncated [ 927.537236][T15814] gfs2: not a GFS2 filesystem [ 927.540032][T15817] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 927.540802][T15814] gfs2: fsid=c: can't read superblock 00:15:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) [ 927.547566][T15817] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:27 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xfc, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 927.553036][T15817] F2FS-fs (loop2): Unrecognized mount option "noin" or missing value [ 927.556945][T15814] gfs2: fsid=c: can't read superblock: -22 00:15:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:27 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x300, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:27 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 23) 00:15:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) 00:15:27 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_d']) 00:15:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 927.652404][T15833] loop2: detected capacity change from 0 to 20 [ 927.656699][T15833] loop2: unable to read partition table [ 927.661146][T15833] loop2: partition table beyond EOD, truncated [ 927.662793][T15833] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 927.670342][T15833] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 927.679234][T15833] F2FS-fs (loop2): Unrecognized mount option "noinline_d" or missing value [ 927.680939][T15839] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 927.683227][T15839] gfs2: fsid=c: Now mounting FS (format 0)... [ 927.685201][T15839] gfs2: not a GFS2 filesystem [ 927.697134][T15839] gfs2: fsid=c: can't read superblock [ 927.698566][T15839] gfs2: fsid=c: can't read superblock: -22 [ 927.966283][T13923] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 928.326446][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 928.329560][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 928.331507][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.379102][T13923] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 928.958364][ T6450] usb 1-1: USB disconnect, device number 64 00:15:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:28 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x500, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:28 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_d']) 00:15:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) 00:15:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 24) [ 928.978058][T15948] loop2: detected capacity change from 0 to 20 [ 928.986919][T15949] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:15:28 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x600, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x8847, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 928.995031][T15949] gfs2: fsid=c: Now mounting FS (format 0)... [ 929.003914][T15948] loop2: unable to read partition table [ 929.005462][T15948] loop2: partition table beyond EOD, truncated [ 929.008474][T15948] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 929.010450][T15948] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) [ 929.012408][T15949] gfs2: not a GFS2 filesystem [ 929.013593][T15949] gfs2: fsid=c: can't read superblock [ 929.015106][T15949] gfs2: fsid=c: can't read superblock: -22 [ 929.024089][T15948] F2FS-fs (loop2): Unrecognized mount option "noinline_d" or missing value 00:15:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x8848, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:29 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x700, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_d']) [ 929.103796][T15963] loop2: detected capacity change from 0 to 20 [ 929.106185][T15963] loop2: unable to read partition table [ 929.114318][T15963] loop2: partition table beyond EOD, truncated [ 929.116039][T15963] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 929.124398][T15963] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 929.128542][T15963] F2FS-fs (loop2): Unrecognized mount option "noinline_d" or missing value [ 929.376290][ T6450] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 929.746433][ T6450] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 929.749579][ T6450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 929.751665][ T6450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.788220][ T6450] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 930.369557][ T3504] usb 1-1: USB disconnect, device number 65 00:15:30 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 25) 00:15:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 00:15:30 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x900, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:30 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dent']) [ 930.392147][T16072] loop2: detected capacity change from 0 to 20 [ 930.405243][T16072] loop2: unable to read partition table 00:15:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 930.409099][T16072] loop2: partition table beyond EOD, truncated [ 930.410754][T16072] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:30 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xa00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 930.419328][T16072] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 930.425797][T16072] F2FS-fs (loop2): Unrecognized mount option "noinline_dent" or missing value 00:15:30 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 26) 00:15:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 00:15:30 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xb00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 930.466191][T16085] FAULT_INJECTION: forcing a failure. [ 930.466191][T16085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.474378][T16085] CPU: 0 PID: 16085 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 930.476786][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 930.479206][T16085] Call trace: [ 930.479968][T16085] dump_backtrace+0x1b0/0x1dc [ 930.481047][T16085] show_stack+0x2c/0x64 [ 930.482032][T16085] dump_stack_lvl+0x104/0x16c [ 930.483127][T16085] dump_stack+0x1c/0x58 [ 930.484104][T16085] should_fail+0x1c4/0x1d8 [ 930.485167][T16085] should_fail_usercopy+0x20/0x30 [ 930.486349][T16085] strncpy_from_user+0x44/0x400 [ 930.487512][T16085] getname_flags+0x84/0x278 [ 930.488549][T16085] __arm64_sys_mkdirat+0x30/0x54 [ 930.489865][T16085] el0_svc_common+0x138/0x220 [ 930.490962][T16085] do_el0_svc+0x48/0x154 00:15:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 930.491992][T16085] el0_svc+0x58/0x150 [ 930.493003][T16085] el0t_64_sync_handler+0x84/0xf0 [ 930.494170][T16085] el0t_64_sync+0x18c/0x190 00:15:30 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xc00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:30 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dent']) 00:15:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) [ 930.545102][T16095] loop2: detected capacity change from 0 to 20 [ 930.554744][T16095] loop2: unable to read partition table [ 930.562231][T16095] loop2: partition table beyond EOD, truncated [ 930.563868][T16095] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 930.565622][T16095] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 930.573732][T16095] F2FS-fs (loop2): Unrecognized mount option "noinline_dent" or missing value [ 930.806452][ T3504] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 931.166333][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 931.169593][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 931.171518][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.207498][ T3504] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 931.790393][ T3504] usb 1-1: USB disconnect, device number 66 00:15:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000108000000090400000903000000092100000001220900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:31 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xd00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:31 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 27) 00:15:31 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dent']) 00:15:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 931.807245][T16202] loop2: detected capacity change from 0 to 20 [ 931.809617][T16202] loop2: unable to read partition table [ 931.811044][T16202] loop2: partition table beyond EOD, truncated [ 931.812460][T16202] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:31 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xe00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 931.822016][T16202] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 931.842381][T16202] F2FS-fs (loop2): Unrecognized mount option "noinline_dent" or missing value 00:15:31 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x1100, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:31 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x1200, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:31 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 28) [ 931.900921][T16217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.903409][T16217] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 931.905064][T16217] gfs2: fsid=c: Now mounting FS (format 0)... [ 931.915220][T16217] gfs2: not a GFS2 filesystem [ 931.922251][T16217] gfs2: fsid=c: can't read superblock [ 931.923651][T16217] gfs2: fsid=c: can't read superblock: -22 [ 932.206330][ T3504] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 932.596488][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.598786][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 932.601635][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 932.603608][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.647447][ T3504] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 933.228991][ T3504] usb 1-1: USB disconnect, device number 67 00:15:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000108000000090400000903000000092100000001220900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentr']) 00:15:33 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x2500, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 29) [ 933.247551][T16326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 933.249252][T16327] loop2: detected capacity change from 0 to 20 [ 933.262195][T16327] loop2: unable to read partition table [ 933.262196][T16326] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 933.262207][T16326] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 933.263641][T16327] loop2: partition table beyond EOD, truncated 00:15:33 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x3f00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 933.275693][T16326] gfs2: not a GFS2 filesystem 00:15:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 933.280396][T16326] gfs2: fsid=c: can't read superblock [ 933.289960][T16327] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 933.291719][T16327] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 933.293548][T16327] F2FS-fs (loop2): Unrecognized mount option "noinline_dentr" or missing value [ 933.295046][T16326] gfs2: fsid=c: can't read superblock: -22 00:15:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x9000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:33 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x4000, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 933.666303][ T3504] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 934.046365][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.048495][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 934.051392][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 934.053498][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.107568][ T3504] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 934.688723][ T6450] usb 1-1: USB disconnect, device number 68 00:15:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000108000000090400000903000000092100000001220900090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:34 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentr']) 00:15:34 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x4800, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 30) 00:15:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 934.704010][T16449] ERROR: Out of memory at tomoyo_realpath_from_path. [ 934.711821][T16451] loop2: detected capacity change from 0 to 20 [ 934.712800][T16449] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 934.714978][T16449] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 934.723490][T16451] loop2: unable to read partition table [ 934.725043][T16451] loop2: partition table beyond EOD, truncated 00:15:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:34 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x4c00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 934.743992][T16451] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 934.746085][T16449] gfs2: not a GFS2 filesystem [ 934.747842][T16449] gfs2: fsid=c: can't read superblock [ 934.749064][T16449] gfs2: fsid=c: can't read superblock: -22 [ 934.749374][T16451] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 934.753749][T16451] F2FS-fs (loop2): Unrecognized mount option "noinline_dentr" or missing value 00:15:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:34 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x6800, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 935.126275][ T6450] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 935.496330][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.498624][ T6450] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 935.501507][ T6450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 935.503600][ T6450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.547657][ T6450] usbhid 1-1:8.0: couldn't find an input interrupt endpoint [ 936.129204][ T6450] usb 1-1: USB disconnect, device number 69 00:15:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:36 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x6c00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x560f0000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:36 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentr']) 00:15:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 31) [ 936.147449][T16575] loop2: detected capacity change from 0 to 20 [ 936.155001][T16575] loop2: unable to read partition table [ 936.159868][T16575] loop2: partition table beyond EOD, truncated [ 936.161511][T16575] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:36 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x7400, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 936.168269][T16575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 936.181136][T16575] F2FS-fs (loop2): Unrecognized mount option "noinline_dentr" or missing value 00:15:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 32) 00:15:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) [ 936.222978][T16585] EXT4-fs error (device nvme0n1p2) in __ext4_new_inode:1085: Out of memory 00:15:36 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x7a00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 936.526281][ T6450] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 936.886365][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.888863][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.891070][ T6450] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 936.894018][ T6450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 936.895990][ T6450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.426398][ T6450] usbhid 1-1:8.0: can't add hid device: -71 [ 937.427795][ T6450] usbhid: probe of 1-1:8.0 failed with error -71 [ 937.435051][ T6450] usb 1-1: USB disconnect, device number 70 00:15:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x560f, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 33) 00:15:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 00:15:37 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x80fe, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 937.872807][T16597] EXT4-fs error (device nvme0n1p2) in __ext4_new_inode:1085: Out of memory 00:15:37 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xfc00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x88470000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:37 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 1) 00:15:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 34) 00:15:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 00:15:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x88480000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 938.166363][ T3503] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 938.566309][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.569115][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.571268][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 938.573993][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 938.575979][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.126510][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 939.128045][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 939.130340][ T3503] usb 1-1: USB disconnect, device number 71 00:15:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 2) 00:15:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xfe80, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 35) 00:15:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x88a8ffff, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 1) [ 939.541377][T16619] FAULT_INJECTION: forcing a failure. [ 939.541377][T16619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.553594][T16624] FAULT_INJECTION: forcing a failure. [ 939.553594][T16624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.558423][T16619] CPU: 1 PID: 16619 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 939.560925][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 939.563197][T16619] Call trace: [ 939.563935][T16619] dump_backtrace+0x1b0/0x1dc [ 939.565051][T16619] show_stack+0x2c/0x64 [ 939.566039][T16619] dump_stack_lvl+0x104/0x16c [ 939.567129][T16619] dump_stack+0x1c/0x58 [ 939.568152][T16619] should_fail+0x1c4/0x1d8 [ 939.569296][T16619] should_fail_usercopy+0x20/0x30 [ 939.570510][T16619] copy_msghdr_from_user+0x64/0x2d0 [ 939.571790][T16619] __sys_sendmsg+0x14c/0x228 [ 939.572870][T16619] __arm64_sys_sendmsg+0x2c/0x3c [ 939.574089][T16619] el0_svc_common+0x138/0x220 [ 939.575228][T16619] do_el0_svc+0x48/0x154 [ 939.576453][T16619] el0_svc+0x58/0x150 [ 939.577449][T16619] el0t_64_sync_handler+0x84/0xf0 [ 939.578707][T16619] el0t_64_sync+0x18c/0x190 00:15:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0xff00, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 939.587457][T16624] CPU: 0 PID: 16624 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 939.589855][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 939.592267][T16624] Call trace: [ 939.593006][T16624] dump_backtrace+0x1b0/0x1dc [ 939.594145][T16624] show_stack+0x2c/0x64 [ 939.595118][T16624] dump_stack_lvl+0x104/0x16c [ 939.596179][T16624] dump_stack+0x1c/0x58 [ 939.597169][T16624] should_fail+0x1c4/0x1d8 [ 939.598257][T16624] should_fail_usercopy+0x20/0x30 [ 939.599399][T16624] __arm64_sys_memfd_create+0x134/0x3ac [ 939.600724][T16624] el0_svc_common+0x138/0x220 [ 939.601799][T16624] do_el0_svc+0x48/0x154 [ 939.602816][T16624] el0_svc+0x58/0x150 [ 939.603739][T16624] el0t_64_sync_handler+0x84/0xf0 [ 939.604885][T16624] el0t_64_sync+0x18c/0x190 00:15:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 36) 00:15:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 2) 00:15:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 3) 00:15:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xefffffff, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) (fail_nth: 37) [ 939.668729][T16637] FAULT_INJECTION: forcing a failure. [ 939.668729][T16637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.683521][T16637] CPU: 0 PID: 16637 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 939.685957][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 939.688352][T16637] Call trace: [ 939.689084][T16637] dump_backtrace+0x1b0/0x1dc [ 939.690193][T16637] show_stack+0x2c/0x64 [ 939.691210][T16637] dump_stack_lvl+0x104/0x16c [ 939.692317][T16637] dump_stack+0x1c/0x58 [ 939.693260][T16637] should_fail+0x1c4/0x1d8 [ 939.694307][T16637] should_fail_usercopy+0x20/0x30 [ 939.695447][T16637] iovec_from_user+0xcc/0x47c [ 939.696537][T16637] __import_iovec+0x60/0x248 [ 939.697610][T16637] import_iovec+0x6c/0x88 [ 939.698652][T16637] copy_msghdr_from_user+0x238/0x2d0 [ 939.699914][T16637] __sys_sendmsg+0x14c/0x228 00:15:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x2, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 939.701040][T16637] __arm64_sys_sendmsg+0x2c/0x3c [ 939.702149][T16637] el0_svc_common+0x138/0x220 [ 939.703247][T16637] do_el0_svc+0x48/0x154 [ 939.704290][T16637] el0_svc+0x58/0x150 [ 939.705302][T16637] el0t_64_sync_handler+0x84/0xf0 [ 939.706555][T16637] el0t_64_sync+0x18c/0x190 [ 939.876303][T13924] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 940.236442][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.239139][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.241534][T13924] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 940.244491][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 940.246590][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.786369][T13924] usbhid 1-1:8.0: can't add hid device: -71 [ 940.787841][T13924] usbhid: probe of 1-1:8.0 failed with error -71 [ 940.795149][T13924] usb 1-1: USB disconnect, device number 72 00:15:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:41 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 4) 00:15:41 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x3, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 3) [ 941.233356][T16651] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:15:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 5) 00:15:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 941.242248][T16651] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:41 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 941.253287][T16651] gfs2: not a GFS2 filesystem 00:15:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 4) [ 941.254778][T16651] gfs2: fsid=c: can't read superblock [ 941.259769][T16651] gfs2: fsid=c: can't read superblock: -22 00:15:41 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x5, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 6) [ 941.516430][ T3503] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 941.886453][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.889091][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.891223][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 941.894180][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 941.896175][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.436296][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 942.437755][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 942.440404][ T3503] usb 1-1: USB disconnect, device number 73 00:15:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 5) 00:15:42 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x6, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:42 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 7) 00:15:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 942.876481][T16678] FAULT_INJECTION: forcing a failure. [ 942.876481][T16678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.884450][T16677] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 942.891940][T16677] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:42 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 8) [ 942.894768][T16678] CPU: 0 PID: 16678 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 942.897286][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 942.899740][T16678] Call trace: [ 942.900425][T16677] gfs2: not a GFS2 filesystem [ 942.900505][T16678] dump_backtrace+0x1b0/0x1dc [ 942.901636][T16677] gfs2: fsid=c: can't read superblock [ 942.902691][T16678] show_stack+0x2c/0x64 [ 942.903854][T16677] gfs2: fsid=c: can't read superblock: -22 [ 942.904816][T16678] dump_stack_lvl+0x104/0x16c [ 942.907149][T16678] dump_stack+0x1c/0x58 [ 942.908148][T16678] should_fail+0x1c4/0x1d8 [ 942.909269][T16678] should_fail_usercopy+0x20/0x30 [ 942.910431][T16678] copyin+0x30/0x108 [ 942.911359][T16678] _copy_from_iter+0x288/0x770 [ 942.912489][T16678] netlink_sendmsg+0x394/0x574 [ 942.913692][T16678] ____sys_sendmsg+0x308/0x450 [ 942.914862][T16678] __sys_sendmsg+0x1ac/0x228 [ 942.916002][T16678] __arm64_sys_sendmsg+0x2c/0x3c [ 942.917172][T16678] el0_svc_common+0x138/0x220 [ 942.918312][T16678] do_el0_svc+0x48/0x154 [ 942.919381][T16678] el0_svc+0x58/0x150 [ 942.920383][T16678] el0t_64_sync_handler+0x84/0xf0 [ 942.921623][T16678] el0t_64_sync+0x18c/0x190 00:15:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:42 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 942.945511][T16685] ERROR: Out of memory at tomoyo_realpath_from_path. 00:15:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 6) [ 942.958000][T16685] loop2: detected capacity change from 0 to 20 [ 942.971781][T16685] loop2: unable to read partition table [ 942.973272][T16685] loop2: partition table beyond EOD, truncated [ 942.974741][T16685] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:42 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x8, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 942.994124][T16685] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 943.005064][T16694] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 943.008484][T16685] syz-executor.2: attempt to access beyond end of device [ 943.008484][T16685] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 943.011846][T16685] syz-executor.2: attempt to access beyond end of device [ 943.011846][T16685] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 943.015093][T16685] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 943.020279][T16694] gfs2: fsid=c: Now mounting FS (format 0)... [ 943.024457][T16694] gfs2: not a GFS2 filesystem [ 943.025551][T16694] gfs2: fsid=c: can't read superblock [ 943.027818][T16694] gfs2: fsid=c: can't read superblock: -22 [ 943.196364][ T3503] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 943.566336][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.569043][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.571303][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 943.574092][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 943.575811][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.116330][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 944.117820][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 944.125668][ T3503] usb 1-1: USB disconnect, device number 74 00:15:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:15:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffffef, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:44 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x9, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 7) 00:15:44 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 9) 00:15:44 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 944.553759][T16701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 944.555740][T16701] loop2: detected capacity change from 0 to 20 [ 944.558729][T16702] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 944.560358][T16702] gfs2: fsid=c: Now mounting FS (format 0)... [ 944.573036][T16701] loop2: unable to read partition table [ 944.574626][T16701] loop2: partition table beyond EOD, truncated 00:15:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 8) 00:15:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000005b490080"], 0x26}}, 0x0) [ 944.582214][T16702] gfs2: not a GFS2 filesystem [ 944.583471][T16702] gfs2: fsid=c: can't read superblock [ 944.584900][T16702] gfs2: fsid=c: can't read superblock: -22 00:15:44 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xa, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 944.595759][T16701] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="100000001200010a18000000005b490080"], 0x26}}, 0x0) [ 944.613742][T16701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 944.623063][T16701] syz-executor.2: attempt to access beyond end of device [ 944.623063][T16701] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 944.633529][T16701] syz-executor.2: attempt to access beyond end of device [ 944.633529][T16701] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 944.638292][T16701] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:15:44 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xb, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="260000001200010a18000000005b490080"], 0x26}}, 0x0) [ 944.656016][T16717] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 944.846379][T13924] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 945.216325][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.218927][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.220992][T13924] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 945.223801][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 945.225783][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.766326][T13924] usbhid 1-1:8.0: can't add hid device: -71 [ 945.767893][T13924] usbhid: probe of 1-1:8.0 failed with error -71 [ 945.769979][T13924] usb 1-1: USB disconnect, device number 75 00:15:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:15:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 9) 00:15:46 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xc, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 10) 00:15:46 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="c00e00001200010a18000000005b490080"], 0x26}}, 0x0) [ 946.203274][T16725] loop2: detected capacity change from 0 to 20 [ 946.214289][T16727] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 946.218108][T16725] loop2: unable to read partition table [ 946.218457][T16727] gfs2: fsid=c: Now mounting FS (format 0)... [ 946.219528][T16725] loop2: partition table beyond EOD, truncated [ 946.222281][T16725] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 946.222859][T16727] gfs2: not a GFS2 filesystem 00:15:46 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xd, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 946.223981][T16725] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 946.224001][T16725] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 946.224011][T16725] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 00:15:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001000010a18000000005b490080"], 0x26}}, 0x0) [ 946.239836][T16727] gfs2: fsid=c: can't read superblock [ 946.241093][T16727] gfs2: fsid=c: can't read superblock: -22 00:15:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 10) 00:15:46 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xe, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200200001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 11) [ 946.328278][T16743] loop2: detected capacity change from 0 to 20 [ 946.332594][ T2560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 946.334784][ T2560] Buffer I/O error on dev loop2, logical block 0, async page read [ 946.344827][ T2560] loop2: unable to read partition table [ 946.346417][ T2560] loop2: partition table beyond EOD, truncated [ 946.352419][T16743] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 946.354268][T16743] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 946.364488][T16743] syz-executor.2: attempt to access beyond end of device [ 946.364488][T16743] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 946.373061][T16743] syz-executor.2: attempt to access beyond end of device [ 946.373061][T16743] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 946.379060][T16743] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 946.496318][ T6450] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 946.856416][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.858922][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.861156][ T6450] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 946.864216][ T6450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 946.866345][ T6450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.406291][ T6450] usbhid 1-1:8.0: can't add hid device: -71 [ 947.407932][ T6450] usbhid: probe of 1-1:8.0 failed with error -71 [ 947.415418][ T6450] usb 1-1: USB disconnect, device number 76 00:15:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:15:47 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:47 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x10, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200300001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 11) 00:15:47 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 12) [ 947.847974][T16752] FAULT_INJECTION: forcing a failure. [ 947.847974][T16752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.851340][T16752] CPU: 1 PID: 16752 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 947.853750][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 947.854344][T16754] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 947.856001][T16752] Call trace: [ 947.856028][T16752] dump_backtrace+0x1b0/0x1dc [ 947.859747][T16752] show_stack+0x2c/0x64 [ 947.860723][T16752] dump_stack_lvl+0x104/0x16c [ 947.860947][T16754] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:47 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x11, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 947.861873][T16752] dump_stack+0x1c/0x58 [ 947.861883][T16752] should_fail+0x1c4/0x1d8 [ 947.861892][T16752] should_fail_usercopy+0x20/0x30 [ 947.861899][T16752] copy_page_from_iter_atomic+0x2fc/0x9e4 [ 947.868114][T16752] generic_perform_write+0x144/0x2cc [ 947.869381][T16752] __generic_file_write_iter+0xd8/0x21c [ 947.870739][T16752] generic_file_write_iter+0x6c/0x168 [ 947.872082][T16752] vfs_write+0x2dc/0x46c [ 947.873138][T16752] __arm64_sys_pwrite64+0xbc/0x11c [ 947.874384][T16752] el0_svc_common+0x138/0x220 [ 947.875454][T16752] do_el0_svc+0x48/0x154 [ 947.876460][T16752] el0_svc+0x58/0x150 [ 947.877582][T16752] el0t_64_sync_handler+0x84/0xf0 [ 947.878855][T16752] el0t_64_sync+0x18c/0x190 00:15:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200400001200010a18000000005b490080"], 0x26}}, 0x0) [ 947.888595][T16752] loop2: detected capacity change from 0 to 20 [ 947.889014][T16754] gfs2: not a GFS2 filesystem [ 947.890996][T16752] loop2: unable to read partition table [ 947.892765][T16752] loop2: partition table beyond EOD, truncated [ 947.893640][T16754] gfs2: fsid=c: can't read superblock [ 947.894354][T16752] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 947.897757][T16752] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 947.900206][T16752] syz-executor.2: attempt to access beyond end of device 00:15:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 12) [ 947.900206][T16752] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 947.903750][T16752] syz-executor.2: attempt to access beyond end of device [ 947.903750][T16752] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 947.907392][T16752] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 947.908888][T16754] gfs2: fsid=c: can't read superblock: -22 00:15:47 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x12, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:47 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x25, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200500001200010a18000000005b490080"], 0x26}}, 0x0) [ 948.166413][ T3503] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 948.526342][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.529205][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.531486][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 948.534439][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 948.536613][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.066419][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 949.067839][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 949.070035][ T3503] usb 1-1: USB disconnect, device number 77 00:15:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 13) 00:15:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 13) 00:15:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x48, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x7, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200600001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 949.510372][T16772] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 949.512208][T16772] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200800001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4c, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 14) [ 949.544173][T16772] gfs2: not a GFS2 filesystem [ 949.545333][T16772] gfs2: fsid=c: can't read superblock [ 949.546992][T16772] gfs2: fsid=c: can't read superblock: -22 00:15:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 14) 00:15:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200900001200010a18000000005b490080"], 0x26}}, 0x0) [ 949.574011][T16786] FAULT_INJECTION: forcing a failure. [ 949.574011][T16786] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:15:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x68, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 949.590751][T16786] CPU: 0 PID: 16786 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 949.593279][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 949.595623][T16786] Call trace: [ 949.596435][T16786] dump_backtrace+0x1b0/0x1dc [ 949.597552][T16786] show_stack+0x2c/0x64 [ 949.598562][T16786] dump_stack_lvl+0x104/0x16c [ 949.599677][T16786] dump_stack+0x1c/0x58 [ 949.600690][T16786] should_fail+0x1c4/0x1d8 [ 949.601724][T16786] should_fail_usercopy+0x20/0x30 [ 949.602879][T16786] strncpy_from_user+0x44/0x400 [ 949.604001][T16786] getname_flags+0x84/0x278 [ 949.605113][T16786] getname+0x28/0x38 [ 949.606072][T16786] do_sys_openat2+0x78/0x22c [ 949.607196][T16786] __arm64_sys_openat+0xb0/0xe0 [ 949.608391][T16786] el0_svc_common+0x138/0x220 [ 949.609507][T16786] do_el0_svc+0x48/0x154 [ 949.610559][T16786] el0_svc+0x58/0x150 [ 949.611514][T16786] el0t_64_sync_handler+0x84/0xf0 [ 949.612732][T16786] el0t_64_sync+0x18c/0x190 00:15:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200a00001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x6c, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200c00001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 15) [ 949.701758][T16801] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 949.703882][T16801] gfs2: fsid=c: Now mounting FS (format 0)... [ 949.705747][T16801] gfs2: not a GFS2 filesystem [ 949.706951][T16801] gfs2: fsid=c: can't read superblock [ 949.708253][T16801] gfs2: fsid=c: can't read superblock: -22 [ 949.846320][ T3503] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 950.236456][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.239267][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.241485][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 950.244358][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 950.246062][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.796330][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 950.797832][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 950.800093][ T3503] usb 1-1: USB disconnect, device number 78 00:15:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:15:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 15) 00:15:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x74, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200f00001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 16) 00:15:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x9, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 951.237238][T16810] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 951.238972][T16810] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7a, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 17) [ 951.254028][T16810] gfs2: not a GFS2 filesystem [ 951.255219][T16810] gfs2: fsid=c: can't read superblock [ 951.257327][T16810] gfs2: fsid=c: can't read superblock: -22 00:15:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="201000001200010a18000000005b490080"], 0x26}}, 0x0) [ 951.266984][T16816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 951.287135][T16816] loop2: detected capacity change from 0 to 20 [ 951.290052][T16816] loop2: unable to read partition table 00:15:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfc, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 951.298278][T16816] loop2: partition table beyond EOD, truncated 00:15:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="206000001200010a18000000005b490080"], 0x26}}, 0x0) [ 951.309923][T16816] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 951.320882][T16816] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 951.330499][T16816] syz-executor.2: attempt to access beyond end of device [ 951.330499][T16816] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 00:15:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (fail_nth: 16) [ 951.334751][T16816] syz-executor.2: attempt to access beyond end of device [ 951.334751][T16816] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 951.345086][T16816] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 951.412510][T16825] FAULT_INJECTION: forcing a failure. [ 951.412510][T16825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.415729][T16825] CPU: 1 PID: 16825 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 951.418186][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 951.420632][T16825] Call trace: [ 951.421396][T16825] dump_backtrace+0x1b0/0x1dc [ 951.422596][T16825] show_stack+0x2c/0x64 [ 951.423560][T16825] dump_stack_lvl+0x104/0x16c [ 951.424613][T16825] dump_stack+0x1c/0x58 [ 951.425569][T16825] should_fail+0x1c4/0x1d8 [ 951.426649][T16825] should_fail_usercopy+0x20/0x30 [ 951.427821][T16825] simple_read_from_buffer+0xc0/0x1dc [ 951.429121][T16825] proc_fail_nth_read+0xf4/0x154 [ 951.430237][T16825] vfs_read+0x19c/0x448 [ 951.431260][T16825] ksys_read+0xb4/0x160 [ 951.432311][T16825] __arm64_sys_read+0x24/0x34 [ 951.433386][T16825] el0_svc_common+0x138/0x220 [ 951.434470][T16825] do_el0_svc+0x48/0x154 [ 951.435543][T16825] el0_svc+0x58/0x150 [ 951.436443][T16825] el0t_64_sync_handler+0x84/0xf0 [ 951.437583][T16825] el0t_64_sync+0x18c/0x190 [ 951.526317][ T3503] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 951.916484][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.919071][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.921309][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 951.924166][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 951.926188][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.456335][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 952.457837][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 952.460115][ T3503] usb 1-1: USB disconnect, device number 79 00:15:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:15:52 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x300, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200003001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:52 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 18) 00:15:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 952.899112][T16834] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 952.900759][T16834] gfs2: fsid=c: Now mounting FS (format 0)... [ 952.902131][T16835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 952.903883][T16835] loop2: detected capacity change from 0 to 20 [ 952.911062][T16835] loop2: unable to read partition table 00:15:52 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x500, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 952.913730][T16834] gfs2: not a GFS2 filesystem 00:15:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200005001200010a18000000005b490080"], 0x26}}, 0x0) [ 952.914922][T16834] gfs2: fsid=c: can't read superblock [ 952.916156][T16834] gfs2: fsid=c: can't read superblock: -22 [ 952.922239][T16835] loop2: partition table beyond EOD, truncated [ 952.931595][T16835] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200006001200010a18000000005b490080"], 0x26}}, 0x0) [ 952.939574][T16835] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 952.946894][T16835] syz-executor.2: attempt to access beyond end of device [ 952.946894][T16835] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 952.952786][T16835] syz-executor.2: attempt to access beyond end of device [ 952.952786][T16835] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 952.958956][T16835] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:15:52 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x600, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200009001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:52 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x700, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 953.176287][T13923] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 953.566344][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.568833][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.570740][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 953.573128][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 953.575279][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.116463][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 954.117989][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 954.123100][T13923] usb 1-1: USB disconnect, device number 80 00:15:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:15:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000a001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:54 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x900, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:54 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 19) 00:15:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xb, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 954.556084][T16858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 954.557910][T16858] loop2: detected capacity change from 0 to 20 [ 954.560845][T16854] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 954.567100][T16854] gfs2: fsid=c: Now mounting FS (format 0)... 00:15:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000c001200010a18000000005b490080"], 0x26}}, 0x0) [ 954.571318][T16854] gfs2: not a GFS2 filesystem 00:15:54 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xa00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 954.572524][T16854] gfs2: fsid=c: can't read superblock [ 954.574091][T16854] gfs2: fsid=c: can't read superblock: -22 [ 954.575629][T16858] loop2: unable to read partition table [ 954.582577][T16858] loop2: partition table beyond EOD, truncated [ 954.593107][T16858] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:15:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20c00e001200010a18000000005b490080"], 0x26}}, 0x0) [ 954.606448][T16858] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 954.613264][T16858] syz-executor.2: attempt to access beyond end of device [ 954.613264][T16858] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 00:15:54 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xb00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 954.622891][T16858] syz-executor.2: attempt to access beyond end of device [ 954.622891][T16858] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 00:15:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000f001200010a18000000005b490080"], 0x26}}, 0x0) [ 954.627210][T16858] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:15:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 954.856318][T13923] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 955.226477][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.229216][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.231381][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 955.234209][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 955.236304][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.776298][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 955.777822][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 955.785314][T13923] usb 1-1: USB disconnect, device number 81 00:15:56 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 20) 00:15:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20560f001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:56 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xc00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}]}}, 0x0}, 0x0) 00:15:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 956.215942][T16882] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 956.217628][T16881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 956.219383][T16881] loop2: detected capacity change from 0 to 20 [ 956.221554][T16882] gfs2: fsid=c: Now mounting FS (format 0)... [ 956.224305][T16882] gfs2: not a GFS2 filesystem [ 956.226868][T16882] gfs2: fsid=c: can't read superblock [ 956.229298][T16882] gfs2: fsid=c: can't read superblock: -22 [ 956.239221][T16881] loop2: unable to read partition table 00:15:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="208847001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:56 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xd00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 956.253501][T16881] loop2: partition table beyond EOD, truncated [ 956.261153][T16881] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 956.262957][T16881] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 956.265476][T16881] syz-executor.2: attempt to access beyond end of device [ 956.265476][T16881] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 956.269516][T16881] syz-executor.2: attempt to access beyond end of device [ 956.269516][T16881] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 956.273006][T16881] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:15:56 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xe00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="208848001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xd, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:56 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 21) 00:15:56 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x1100, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200f56001200010a18000000005b490080"], 0x26}}, 0x0) [ 956.348334][T16900] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 956.353629][T16900] gfs2: fsid=c: Now mounting FS (format 0)... [ 956.355843][T16903] loop2: detected capacity change from 0 to 20 00:15:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="206558001200010a18000000005b490080"], 0x26}}, 0x0) [ 956.370691][T16900] gfs2: not a GFS2 filesystem [ 956.372218][T16900] gfs2: fsid=c: can't read superblock [ 956.373896][T16903] loop2: unable to read partition table [ 956.376600][T16900] gfs2: fsid=c: can't read superblock: -22 [ 956.379189][T16903] loop2: partition table beyond EOD, truncated [ 956.383151][T16903] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 956.395467][T16903] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 956.400769][T16903] syz-executor.2: attempt to access beyond end of device [ 956.400769][T16903] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 956.408838][T16903] syz-executor.2: attempt to access beyond end of device [ 956.408838][T16903] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 956.414012][T16903] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 956.516371][ T3504] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 956.887030][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.889545][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.891441][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 956.893920][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 956.895990][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.616493][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 957.618042][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 957.620506][ T3504] usb 1-1: USB disconnect, device number 82 00:15:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}]}}, 0x0}, 0x0) 00:15:58 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x1200, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:15:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200060001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:58 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 22) 00:15:58 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xe, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 958.074514][T16911] loop2: detected capacity change from 0 to 20 [ 958.078473][T16912] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 958.081082][T16911] loop2: unable to read partition table [ 958.082540][T16911] loop2: partition table beyond EOD, truncated [ 958.084156][T16911] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 958.085905][T16911] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="205865001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:58 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x2500, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 958.109357][T16912] gfs2: fsid=c: Now mounting FS (format 0)... [ 958.113928][T16911] syz-executor.2: attempt to access beyond end of device [ 958.113928][T16911] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 00:15:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200081001200010a18000000005b490080"], 0x26}}, 0x0) [ 958.124927][T16912] gfs2: not a GFS2 filesystem [ 958.126109][T16912] gfs2: fsid=c: can't read superblock [ 958.131991][T16912] gfs2: fsid=c: can't read superblock: -22 [ 958.133507][T16911] syz-executor.2: attempt to access beyond end of device [ 958.133507][T16911] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 00:15:58 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x3f00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 958.158533][T16911] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:15:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="204788001200010a18000000005b490080"], 0x26}}, 0x0) [ 958.356287][T13923] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 958.746370][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.749053][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.751414][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 958.754278][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 958.756396][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.496300][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 959.497857][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 959.502895][T13923] usb 1-1: USB disconnect, device number 83 00:15:59 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}]}}, 0x0}, 0x0) [ 959.954569][T16935] loop2: detected capacity change from 0 to 20 00:15:59 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:15:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="204888001200010a18000000005b490080"], 0x26}}, 0x0) 00:15:59 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 23) 00:15:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xf, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:15:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 959.960014][T16938] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 959.963091][T16935] loop2: unable to read partition table [ 959.964547][T16935] loop2: partition table beyond EOD, truncated [ 959.965906][T16935] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 959.970056][T16938] gfs2: fsid=c: Now mounting FS (format 0)... [ 959.974743][T16938] gfs2: not a GFS2 filesystem [ 959.976077][T16938] gfs2: fsid=c: can't read superblock [ 959.977937][T16938] gfs2: fsid=c: can't read superblock: -22 00:15:59 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4800, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 959.982417][T16935] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:15:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200ec0001200010a18000000005b490080"], 0x26}}, 0x0) [ 959.998485][T16935] syz-executor.2: attempt to access beyond end of device [ 959.998485][T16935] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 960.001957][T16935] syz-executor.2: attempt to access beyond end of device [ 960.001957][T16935] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 960.005015][T16935] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000007b00010a18000000005b490080"], 0x26}}, 0x0) 00:16:00 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4c00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200002001200010a18000000005b490080"], 0x26}}, 0x0) [ 960.236327][ T3504] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 960.636466][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.639152][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.641360][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 960.644248][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 960.646327][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.366309][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 961.367793][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 961.370131][ T3504] usb 1-1: USB disconnect, device number 84 00:16:01 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 24) 00:16:01 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x5efe, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200003001200010a18000000005b490080"], 0x26}}, 0x0) 00:16:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main]}}, 0x0}, 0x0) [ 961.841271][T16958] loop2: detected capacity change from 0 to 20 [ 961.843696][T16961] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 961.845403][T16961] gfs2: fsid=c: Now mounting FS (format 0)... [ 961.850399][T16958] loop2: unable to read partition table [ 961.851771][T16958] loop2: partition table beyond EOD, truncated [ 961.853164][T16958] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 961.854891][T16958] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200004001200010a18000000005b490080"], 0x26}}, 0x0) [ 961.858081][T16961] gfs2: not a GFS2 filesystem [ 961.859161][T16961] gfs2: fsid=c: can't read superblock [ 961.860357][T16961] gfs2: fsid=c: can't read superblock: -22 00:16:01 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x6800, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 961.864923][T16958] syz-executor.2: attempt to access beyond end of device [ 961.864923][T16958] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 961.875062][T16958] syz-executor.2: attempt to access beyond end of device [ 961.875062][T16958] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 961.902618][T16958] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:01 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x6c00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200005001200010a18000000005b490080"], 0x26}}, 0x0) 00:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:01 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7400, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:01 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 25) 00:16:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x11, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200006001200010a18000000005b490080"], 0x26}}, 0x0) [ 961.973434][T16979] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 961.975239][T16982] loop2: detected capacity change from 0 to 20 [ 961.978563][T16979] gfs2: fsid=c: Now mounting FS (format 0)... [ 961.981719][T16982] loop2: unable to read partition table [ 961.985114][T16982] loop2: partition table beyond EOD, truncated [ 961.987073][T16979] gfs2: not a GFS2 filesystem [ 961.987080][T16979] gfs2: fsid=c: can't read superblock [ 961.987087][T16979] gfs2: fsid=c: can't read superblock: -22 00:16:01 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7a00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200008001200010a18000000005b490080"], 0x26}}, 0x0) [ 962.012022][T16982] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 962.020908][T16982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 962.028825][T16982] syz-executor.2: attempt to access beyond end of device [ 962.028825][T16982] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 962.040392][T16982] syz-executor.2: attempt to access beyond end of device [ 962.040392][T16982] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 962.043881][T16982] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 962.126341][ T3504] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 962.486318][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.488907][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.491054][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 962.494015][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 962.496098][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.236276][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 963.237862][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 963.240141][ T3504] usb 1-1: USB disconnect, device number 85 00:16:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main]}}, 0x0}, 0x0) 00:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200009001200010a18000000005b490080"], 0x26}}, 0x0) 00:16:03 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x80fe, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:03 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x12, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:03 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 26) [ 963.691321][T16993] loop2: detected capacity change from 0 to 20 [ 963.696130][T16994] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 963.707029][T16994] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:03 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfc00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 963.709606][T16993] loop2: unable to read partition table 00:16:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000a001200010a18000000005b490080"], 0x26}}, 0x0) [ 963.711458][T16993] loop2: partition table beyond EOD, truncated [ 963.716703][T16994] gfs2: not a GFS2 filesystem [ 963.718976][T16994] gfs2: fsid=c: can't read superblock [ 963.725357][T16994] gfs2: fsid=c: can't read superblock: -22 00:16:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000c001200010a18000000005b490080"], 0x26}}, 0x0) [ 963.738729][T16993] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 963.749643][T16993] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 963.752672][T16993] syz-executor.2: attempt to access beyond end of device [ 963.752672][T16993] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 963.762325][T16993] syz-executor.2: attempt to access beyond end of device [ 963.762325][T16993] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 963.766185][T16993] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:03 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfe80, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000f001200010a18000000005b490080"], 0x26}}, 0x0) 00:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 963.996293][ T3504] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 964.376319][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.379059][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.381192][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 964.384063][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 964.386081][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.136428][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 965.137959][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 965.140308][ T3504] usb 1-1: USB disconnect, device number 86 00:16:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x13, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200010001200010a18000000005b490080"], 0x26}}, 0x0) 00:16:05 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xff00, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:05 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 27) 00:16:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main]}}, 0x0}, 0x0) 00:16:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 965.583516][T17020] loop2: detected capacity change from 0 to 20 [ 965.592520][T17021] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 965.594402][T17021] gfs2: fsid=c: Now mounting FS (format 0)... [ 965.597387][T17020] loop2: unable to read partition table [ 965.599008][T17020] loop2: partition table beyond EOD, truncated 00:16:05 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x100000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 965.602006][T17021] gfs2: not a GFS2 filesystem 00:16:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200060001200010a18000000005b490080"], 0x26}}, 0x0) [ 965.607932][T17021] gfs2: fsid=c: can't read superblock [ 965.611484][T17021] gfs2: fsid=c: can't read superblock: -22 [ 965.623358][T17020] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:16:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000031200010a18000000005b490080"], 0x26}}, 0x0) [ 965.637763][T17020] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 965.652542][T17020] syz-executor.2: attempt to access beyond end of device [ 965.652542][T17020] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 965.656182][T17020] syz-executor.2: attempt to access beyond end of device [ 965.656182][T17020] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 00:16:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000051200010a18000000005b490080"], 0x26}}, 0x0) [ 965.663669][T17020] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:05 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x1000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000061200010a18000000005b490080"], 0x26}}, 0x0) 00:16:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x14, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000091200010a18000000005b490080"], 0x26}}, 0x0) [ 965.715921][T17040] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 965.724858][T17040] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:05 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 28) [ 965.735548][T17040] gfs2: not a GFS2 filesystem [ 965.744373][T17040] gfs2: fsid=c: can't read superblock [ 965.754213][T17040] gfs2: fsid=c: can't read superblock: -22 [ 965.756615][T17044] loop2: detected capacity change from 0 to 20 [ 965.777916][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 965.780171][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 965.781924][T12789] ldm_validate_partition_table(): Disk read failed. [ 965.783283][T12789] Dev loop2: unable to read RDB block 0 [ 965.784500][T12789] loop2: unable to read partition table [ 965.785914][T12789] loop2: partition table beyond EOD, truncated [ 965.922314][ T3504] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 966.276471][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.279061][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.281339][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 966.284230][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 966.286327][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.016350][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 967.017904][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 967.020114][ T3504] usb 1-1: USB disconnect, device number 87 00:16:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:07 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x2000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000000a1200010a18000000005b490080"], 0x26}}, 0x0) 00:16:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x1, 0x0, 0x0, "ee"}]}}, 0x0}, 0x0) 00:16:07 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 29) 00:16:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x15, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 967.484649][T17054] loop2: detected capacity change from 0 to 20 [ 967.494781][T17055] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 967.496951][T17055] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:07 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x3000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 967.503195][T17055] gfs2: not a GFS2 filesystem [ 967.504439][T17055] gfs2: fsid=c: can't read superblock [ 967.505861][T17055] gfs2: fsid=c: can't read superblock: -22 00:16:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000000c1200010a18000000005b490080"], 0x26}}, 0x0) 00:16:07 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000c00e1200010a18000000005b490080"], 0x26}}, 0x0) 00:16:07 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 30) 00:16:07 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x5000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 967.573143][T17068] loop2: detected capacity change from 0 to 20 [ 967.574547][T17068] FAULT_INJECTION: forcing a failure. [ 967.574547][T17068] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:16:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x16, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 967.590296][T17072] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 967.591972][T17072] gfs2: fsid=c: Now mounting FS (format 0)... [ 967.605163][T17072] gfs2: not a GFS2 filesystem [ 967.607803][T17068] CPU: 0 PID: 17068 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 967.610175][T17068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 00:16:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000000f1200010a18000000005b490080"], 0x26}}, 0x0) [ 967.612527][T17068] Call trace: [ 967.613354][T17068] dump_backtrace+0x1b0/0x1dc [ 967.614483][T17068] show_stack+0x2c/0x64 [ 967.615495][T17068] dump_stack_lvl+0x104/0x16c [ 967.616643][T17068] dump_stack+0x1c/0x58 [ 967.617657][T17068] should_fail+0x1c4/0x1d8 [ 967.618763][T17068] should_fail_usercopy+0x20/0x30 [ 967.620036][T17068] strncpy_from_user+0x44/0x400 [ 967.621288][T17068] getname_flags+0x84/0x278 [ 967.622449][T17068] __arm64_sys_mkdirat+0x30/0x54 [ 967.623678][T17068] el0_svc_common+0x138/0x220 [ 967.624818][T17068] do_el0_svc+0x48/0x154 [ 967.625870][T17068] el0_svc+0x58/0x150 [ 967.626850][T17068] el0t_64_sync_handler+0x84/0xf0 [ 967.628113][T17068] el0t_64_sync+0x18c/0x190 [ 967.635968][T17072] gfs2: fsid=c: can't read superblock [ 967.645080][T17072] gfs2: fsid=c: can't read superblock: -22 [ 967.645904][T12789] loop2: unable to read partition table [ 967.649339][T12789] loop2: partition table beyond EOD, truncated [ 967.776432][T13924] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 968.146355][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.148844][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.151050][T13924] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 968.154055][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 968.156072][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.896363][T13924] usbhid 1-1:8.0: can't add hid device: -71 [ 968.897828][T13924] usbhid: probe of 1-1:8.0 failed with error -71 [ 968.899926][T13924] usb 1-1: USB disconnect, device number 88 00:16:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000560f1200010a18000000005b490080"], 0x26}}, 0x0) 00:16:09 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x6000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:09 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x17, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:09 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 31) 00:16:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x1, 0x0, 0x0, "ee"}]}}, 0x0}, 0x0) [ 969.359135][T17090] loop2: detected capacity change from 0 to 20 [ 969.362000][T17091] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:09 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 969.376362][T17091] gfs2: fsid=c: Now mounting FS (format 0)... [ 969.378377][T17091] gfs2: not a GFS2 filesystem 00:16:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200088471200010a18000000005b490080"], 0x26}}, 0x0) [ 969.382917][T17091] gfs2: fsid=c: can't read superblock [ 969.386425][T17091] gfs2: fsid=c: can't read superblock: -22 00:16:09 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 32) 00:16:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200088481200010a18000000005b490080"], 0x26}}, 0x0) [ 969.425125][T17099] loop2: detected capacity change from 0 to 20 [ 969.430199][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 969.430475][T17099] ERROR: Out of memory at tomoyo_realpath_from_path. 00:16:09 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x8000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000f561200010a18000000005b490080"], 0x26}}, 0x0) [ 969.448238][T12789] Buffer I/O error on dev loop2, logical block 0, async page read 00:16:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200065581200010a18000000005b490080"], 0x26}}, 0x0) [ 969.465658][T12789] loop2: unable to read partition table 00:16:09 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x22, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 969.475615][T12789] loop2: partition table beyond EOD, truncated [ 969.483368][T17099] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 969.485287][T17099] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 969.487918][T17099] syz-executor.2: attempt to access beyond end of device [ 969.487918][T17099] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 00:16:09 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x9000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 969.496541][T17099] syz-executor.2: attempt to access beyond end of device [ 969.496541][T17099] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 969.509768][T17099] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 969.522199][T17112] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 969.528701][T17112] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:09 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 33) [ 969.538079][T17112] gfs2: not a GFS2 filesystem [ 969.542742][T17112] gfs2: fsid=c: can't read superblock [ 969.547674][T17112] gfs2: fsid=c: can't read superblock: -22 [ 969.562637][T17115] loop2: detected capacity change from 0 to 20 [ 969.587597][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 969.593228][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 969.595170][T12789] ldm_validate_partition_table(): Disk read failed. [ 969.597112][T12789] Dev loop2: unable to read RDB block 0 [ 969.598600][T12789] loop2: unable to read partition table [ 969.600061][T12789] loop2: partition table beyond EOD, truncated [ 969.656440][ T3504] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 970.046440][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.049185][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.051293][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 970.054240][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 970.057036][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.786346][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 970.787917][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 970.790153][ T3504] usb 1-1: USB disconnect, device number 89 00:16:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000601200010a18000000005b490080"], 0x26}}, 0x0) 00:16:11 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xa000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x25, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x9, "d450"}, @main=@item_012={0x1, 0x0, 0x0, "ee"}]}}, 0x0}, 0x0) 00:16:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 34) [ 971.252322][T17123] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 971.254094][T17123] gfs2: fsid=c: Now mounting FS (format 0)... [ 971.258576][T17126] loop2: detected capacity change from 0 to 20 [ 971.266776][T17123] gfs2: not a GFS2 filesystem [ 971.268103][T17123] gfs2: fsid=c: can't read superblock [ 971.269511][T17123] gfs2: fsid=c: can't read superblock: -22 00:16:11 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xb000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200058651200010a18000000005b490080"], 0x26}}, 0x0) 00:16:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000811200010a18000000005b490080"], 0x26}}, 0x0) 00:16:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 35) 00:16:11 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xc000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 971.338370][T17135] loop2: detected capacity change from 0 to 20 [ 971.340038][T17135] EXT4-fs error (device nvme0n1p2) in __ext4_new_inode:1085: Out of memory [ 971.351753][T12789] loop2: unable to read partition table [ 971.355949][T12789] loop2: partition table beyond EOD, truncated 00:16:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200047881200010a18000000005b490080"], 0x26}}, 0x0) 00:16:11 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xd000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 36) [ 971.406790][T17147] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 971.414018][T17149] loop2: detected capacity change from 0 to 20 [ 971.414796][T17147] gfs2: fsid=c: Now mounting FS (format 0)... [ 971.428104][T17147] gfs2: not a GFS2 filesystem [ 971.429315][T17147] gfs2: fsid=c: can't read superblock [ 971.430610][T17147] gfs2: fsid=c: can't read superblock: -22 [ 971.462324][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 971.464621][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 971.467241][T12789] ldm_validate_partition_table(): Disk read failed. [ 971.468997][T12789] Dev loop2: unable to read RDB block 0 [ 971.470386][T12789] loop2: unable to read partition table [ 971.471992][T12789] loop2: partition table beyond EOD, truncated [ 971.556529][T13923] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 971.926434][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.929093][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.931352][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 971.934199][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 971.936201][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.676424][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 972.677962][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 972.680261][T13923] usb 1-1: USB disconnect, device number 90 00:16:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200048881200010a18000000005b490080"], 0x26}}, 0x0) 00:16:13 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xe000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:13 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 37) 00:16:13 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4c, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 973.135068][T17157] loop2: detected capacity change from 0 to 20 00:16:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 973.142349][T17159] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 973.144070][T17159] gfs2: fsid=c: Now mounting FS (format 0)... [ 973.147425][T17159] gfs2: not a GFS2 filesystem [ 973.148700][T17159] gfs2: fsid=c: can't read superblock [ 973.150100][T17159] gfs2: fsid=c: can't read superblock: -22 00:16:13 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x10000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000ec01200010a18000000005b490080"], 0x26}}, 0x0) 00:16:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000021200010a18000000005b490080"], 0x26}}, 0x0) 00:16:13 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x11000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:13 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 38) [ 973.218255][T17169] loop2: detected capacity change from 0 to 20 00:16:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000031200010a18000000005b490080"], 0x26}}, 0x0) 00:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:13 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5c, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000041200010a18000000005b490080"], 0x26}}, 0x0) 00:16:13 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x12000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 973.278416][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 973.281257][T17177] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 973.285344][T17177] gfs2: fsid=c: Now mounting FS (format 0)... [ 973.289686][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 973.289734][T17177] gfs2: not a GFS2 filesystem [ 973.295171][T17177] gfs2: fsid=c: can't read superblock [ 973.296762][T12789] ldm_validate_partition_table(): Disk read failed. [ 973.297756][T17177] gfs2: fsid=c: can't read superblock: -22 00:16:13 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x25000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 973.301771][T12789] Dev loop2: unable to read RDB block 0 [ 973.312795][T12789] loop2: unable to read partition table [ 973.321406][T12789] loop2: partition table beyond EOD, truncated [ 973.426541][ T6450] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 973.806307][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.808902][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.811074][ T6450] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.813962][ T6450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 973.816010][ T6450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.556513][ T6450] usbhid 1-1:8.0: can't add hid device: -71 [ 974.558147][ T6450] usbhid: probe of 1-1:8.0 failed with error -71 [ 974.560405][ T6450] usb 1-1: USB disconnect, device number 91 00:16:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000051200010a18000000005b490080"], 0x26}}, 0x0) 00:16:14 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x3f000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:14 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 39) 00:16:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:14 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x68, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 975.015725][T17191] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 975.022620][T17194] loop2: detected capacity change from 0 to 20 [ 975.029284][T17191] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:15 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x40000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 975.031590][T17191] gfs2: not a GFS2 filesystem 00:16:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000061200010a18000000005b490080"], 0x26}}, 0x0) [ 975.036946][T17191] gfs2: fsid=c: can't read superblock [ 975.039538][T17191] gfs2: fsid=c: can't read superblock: -22 00:16:15 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 40) 00:16:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000081200010a18000000005b490080"], 0x26}}, 0x0) [ 975.075251][T17201] loop2: detected capacity change from 0 to 20 00:16:15 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x48000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 975.109187][T26746] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 975.114673][T26746] Buffer I/O error on dev loop2, logical block 0, async page read [ 975.123408][T26746] ldm_validate_partition_table(): Disk read failed. [ 975.125079][T26746] Dev loop2: unable to read RDB block 0 [ 975.127310][T26746] loop2: unable to read partition table [ 975.128895][T26746] loop2: partition table beyond EOD, truncated [ 975.296290][ T6450] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 975.676310][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.678766][ T6450] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.680912][ T6450] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 975.684033][ T6450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 975.686035][ T6450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.436321][ T6450] usbhid 1-1:8.0: can't add hid device: -71 [ 976.437820][ T6450] usbhid: probe of 1-1:8.0 failed with error -71 [ 976.440055][ T6450] usb 1-1: USB disconnect, device number 92 00:16:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000091200010a18000000005b490080"], 0x26}}, 0x0) 00:16:16 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6c, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:16 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4c000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:16 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 41) 00:16:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 976.900897][T17217] loop2: detected capacity change from 0 to 20 00:16:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000000a1200010a18000000005b490080"], 0x26}}, 0x0) [ 976.903209][T17211] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 976.909803][T17211] gfs2: fsid=c: Now mounting FS (format 0)... [ 976.911571][T17211] gfs2: not a GFS2 filesystem 00:16:16 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x68000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 976.912612][T17211] gfs2: fsid=c: can't read superblock [ 976.914267][T17211] gfs2: fsid=c: can't read superblock: -22 00:16:16 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 42) [ 976.954219][T17225] loop2: detected capacity change from 0 to 20 00:16:16 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x6c000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000000c1200010a18000000005b490080"], 0x26}}, 0x0) [ 976.981001][T17225] loop2: unable to read partition table 00:16:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x78, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 976.982835][T17225] loop2: partition table beyond EOD, truncated [ 976.985593][T17225] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 976.992268][T17225] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 977.009272][T17225] syz-executor.2: attempt to access beyond end of device [ 977.009272][T17225] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 977.015531][T17225] syz-executor.2: attempt to access beyond end of device [ 977.015531][T17225] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 977.024106][T17225] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 977.186325][ T3503] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 977.576355][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.579132][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.581286][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.584251][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 977.586679][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.316722][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 978.318213][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 978.322842][ T3503] usb 1-1: USB disconnect, device number 93 00:16:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x74000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x74, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000000f1200010a18000000005b490080"], 0x26}}, 0x0) 00:16:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:18 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 43) 00:16:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 978.789497][T17240] loop2: detected capacity change from 0 to 20 [ 978.792467][T17241] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 978.794227][T17241] gfs2: fsid=c: Now mounting FS (format 0)... [ 978.804846][T17240] loop2: unable to read partition table [ 978.806867][T17240] loop2: partition table beyond EOD, truncated [ 978.808482][T17240] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 978.810253][T17240] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7a000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000101200010a18000000005b490080"], 0x26}}, 0x0) [ 978.827632][T17241] gfs2: not a GFS2 filesystem [ 978.828823][T17241] gfs2: fsid=c: can't read superblock [ 978.830136][T17241] gfs2: fsid=c: can't read superblock: -22 [ 978.832773][T17240] syz-executor.2: attempt to access beyond end of device [ 978.832773][T17240] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 978.840013][T17240] syz-executor.2: attempt to access beyond end of device [ 978.840013][T17240] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 978.847001][T17240] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000601200010a18000000005b490080"], 0x26}}, 0x0) 00:16:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xe0ffffff, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000007b00010a18000000005b490080"], 0x26}}, 0x0) 00:16:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:18 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 44) 00:16:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x7a, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfc000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001000010a18000000005b490080"], 0x26}}, 0x0) [ 978.922532][T17258] loop2: detected capacity change from 0 to 20 [ 978.929463][T17260] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 978.932446][T17260] gfs2: fsid=c: Now mounting FS (format 0)... [ 978.934397][T17260] gfs2: not a GFS2 filesystem [ 978.935615][T17260] gfs2: fsid=c: can't read superblock [ 978.936047][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.941767][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 978.942618][T17260] gfs2: fsid=c: can't read superblock: -22 00:16:18 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfe5e0000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 978.954733][T12789] loop2: unable to read partition table [ 978.967637][T12789] loop2: partition table beyond EOD, truncated [ 978.971626][T17258] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 978.973680][T17258] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 978.977219][T17258] syz-executor.2: attempt to access beyond end of device [ 978.977219][T17258] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 978.984749][T17258] syz-executor.2: attempt to access beyond end of device [ 978.984749][T17258] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 978.989787][T17258] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 979.066329][ T3504] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 979.467030][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.469598][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.472073][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 979.474989][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 979.477256][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.967132][ T3504] hid-generic 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 979.968999][ T3504] hid-generic 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 979.971230][ T3504] hid-generic 0003:0D8C:0022.000C: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 980.168214][ T3504] usb 1-1: USB disconnect, device number 94 00:16:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000007b00010a18000000005b490080"], 0x26}}, 0x0) 00:16:20 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xac, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 980.685391][T17272] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:20 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfe800000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:20 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 45) [ 980.692648][T17276] loop2: detected capacity change from 0 to 20 [ 980.693336][T17272] gfs2: fsid=c: Now mounting FS (format 0)... [ 980.701786][T17276] loop2: unable to read partition table [ 980.701806][T17272] gfs2: not a GFS2 filesystem [ 980.703345][T17276] loop2: partition table beyond EOD, truncated [ 980.705201][T17272] gfs2: fsid=c: can't read superblock 00:16:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001203000a18000000005b490080"], 0x26}}, 0x0) [ 980.710446][T17272] gfs2: fsid=c: can't read superblock: -22 00:16:20 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfe80ffff, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 980.722561][T17276] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 980.731782][T17276] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 980.739960][T17276] syz-executor.2: attempt to access beyond end of device [ 980.739960][T17276] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 980.752068][T17276] syz-executor.2: attempt to access beyond end of device [ 980.752068][T17276] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 00:16:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 980.759305][T17276] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001204000a18000000005b490080"], 0x26}}, 0x0) 00:16:20 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xfec0ffff, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:20 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x134, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 980.817594][T17289] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 980.819736][T17289] gfs2: fsid=c: Now mounting FS (format 0)... [ 980.824763][T17289] gfs2: not a GFS2 filesystem [ 980.825874][T17289] gfs2: fsid=c: can't read superblock [ 980.827557][T17289] gfs2: fsid=c: can't read superblock: -22 [ 980.966293][ T3503] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 981.336358][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.339094][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.341319][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 981.344217][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 981.346144][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.076401][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 982.077826][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 982.082333][ T3503] usb 1-1: USB disconnect, device number 95 00:16:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001202010a18000000005b490080"], 0x26}}, 0x0) 00:16:22 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xff000000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:22 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 46) 00:16:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x84c, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:22 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1e2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 982.545178][T17297] loop2: detected capacity change from 0 to 20 [ 982.548114][T17298] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 982.549784][T17298] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001203010a18000000005b490080"], 0x26}}, 0x0) 00:16:22 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xffff0000, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 982.563855][T17297] loop2: unable to read partition table [ 982.565351][T17297] loop2: partition table beyond EOD, truncated [ 982.578688][T17297] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 982.580617][T17297] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 982.585458][T17298] gfs2: not a GFS2 filesystem [ 982.587191][T17298] gfs2: fsid=c: can't read superblock [ 982.595301][T17298] gfs2: fsid=c: can't read superblock: -22 [ 982.598163][T17297] syz-executor.2: attempt to access beyond end of device [ 982.598163][T17297] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 982.603809][T17297] syz-executor.2: attempt to access beyond end of device [ 982.603809][T17297] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 00:16:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001204010a18000000005b490080"], 0x26}}, 0x0) 00:16:22 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xffff80fe, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 982.621698][T17297] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001205010a18000000005b490080"], 0x26}}, 0x0) 00:16:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:22 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 47) 00:16:22 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xffffc0fe, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 982.689683][T17316] loop2: detected capacity change from 0 to 20 00:16:22 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1e3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 982.711735][T17316] loop2: unable to read partition table 00:16:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001206010a18000000005b490080"], 0x26}}, 0x0) [ 982.713533][T17316] loop2: partition table beyond EOD, truncated [ 982.715619][T17316] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 982.721407][T17316] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 982.725312][T17318] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 982.727675][T17318] gfs2: fsid=c: Now mounting FS (format 0)... [ 982.728503][T17316] syz-executor.2: attempt to access beyond end of device [ 982.728503][T17316] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 982.741089][T17318] gfs2: not a GFS2 filesystem [ 982.743592][T17318] gfs2: fsid=c: can't read superblock 00:16:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 982.752829][T17318] gfs2: fsid=c: can't read superblock: -22 [ 982.759417][T17316] syz-executor.2: attempt to access beyond end of device [ 982.759417][T17316] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 982.770914][T17316] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 982.846374][T13923] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 983.206338][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.208888][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.211014][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 983.213891][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 983.215902][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.956425][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 983.957829][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 983.960367][T13923] usb 1-1: USB disconnect, device number 96 00:16:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xffffff7f, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001208010a18000000005b490080"], 0x26}}, 0x0) 00:16:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 48) 00:16:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xb00, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:24 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x204, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 984.414768][T17330] loop2: detected capacity change from 0 to 20 [ 984.418579][T17333] loop3: detected capacity change from 0 to 1 [ 984.426366][T17333] Dev loop3: unable to read RDB block 1 00:16:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xffffffe0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 984.427771][T17333] loop3: unable to read partition table [ 984.429132][T17333] loop3: partition table beyond EOD, truncated [ 984.437347][T17330] loop2: unable to read partition table 00:16:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001209010a18000000005b490080"], 0x26}}, 0x0) [ 984.439608][T17330] loop2: partition table beyond EOD, truncated [ 984.447169][T17330] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 984.456998][T17333] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 984.458943][T17330] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 984.461696][T17330] syz-executor.2: attempt to access beyond end of device [ 984.461696][T17330] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 984.468135][T17333] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local={0xfe, 0x2}, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000000120a010a18000000005b490080"], 0x26}}, 0x0) [ 984.478736][T17333] syz-executor.3: attempt to access beyond end of device [ 984.478736][T17333] loop3: rw=4096, sector=128, nr_sectors = 8 limit=1 [ 984.480652][T17330] syz-executor.2: attempt to access beyond end of device [ 984.480652][T17330] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 00:16:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 984.500021][T17333] gfs2: error 10 reading superblock [ 984.501915][T17330] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000000120c010a18000000005b490080"], 0x26}}, 0x0) 00:16:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local={0xfe, 0x18}, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 984.510561][T17333] gfs2: fsid=c: can't read superblock [ 984.518186][T17333] gfs2: fsid=c: can't read superblock: -5 00:16:24 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local={0xfe, 0x1b}, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 49) 00:16:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="20000000120f010a18000000005b490080"], 0x26}}, 0x0) [ 984.611534][T17355] loop2: detected capacity change from 0 to 20 [ 984.613335][T17355] FAULT_INJECTION: forcing a failure. [ 984.613335][T17355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.625578][T17355] CPU: 0 PID: 17355 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 984.628016][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 984.630374][T17355] Call trace: [ 984.631130][T17355] dump_backtrace+0x1b0/0x1dc [ 984.632258][T17355] show_stack+0x2c/0x64 [ 984.633208][T17355] dump_stack_lvl+0x104/0x16c [ 984.634338][T17355] dump_stack+0x1c/0x58 [ 984.635349][T17355] should_fail+0x1c4/0x1d8 [ 984.636400][T17355] should_fail_usercopy+0x20/0x30 [ 984.637564][T17355] memdup_user+0x9c/0x1b8 [ 984.638593][T17355] strndup_user+0x78/0xb0 [ 984.639598][T17355] __arm64_sys_mount+0x60/0x408 [ 984.640754][T17355] el0_svc_common+0x138/0x220 [ 984.641932][T17355] do_el0_svc+0x48/0x154 [ 984.642932][T17355] el0_svc+0x58/0x150 [ 984.643968][T17355] el0t_64_sync_handler+0x84/0xf0 [ 984.645175][T17355] el0t_64_sync+0x18c/0x190 [ 984.726444][ T7131] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 985.086303][ T7131] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.088953][ T7131] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.091221][ T7131] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 985.094114][ T7131] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 985.096364][ T7131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.816371][ T7131] usbhid 1-1:8.0: can't add hid device: -71 [ 985.817821][ T7131] usbhid: probe of 1-1:8.0 failed with error -71 [ 985.825460][ T7131] usb 1-1: USB disconnect, device number 97 [ 986.086695][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.088353][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 00:16:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x1, 0x0, 0x0, "d4"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:26 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x2}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001210010a18000000005b490080"], 0x26}}, 0x0) 00:16:26 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21c, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 50) [ 986.286064][T17363] loop3: detected capacity change from 0 to 1 [ 986.286997][T17364] loop2: detected capacity change from 0 to 20 [ 986.289427][T17364] FAULT_INJECTION: forcing a failure. [ 986.289427][T17364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.292447][T17364] CPU: 0 PID: 17364 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 986.294729][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 986.296964][T17364] Call trace: [ 986.297751][T17364] dump_backtrace+0x1b0/0x1dc [ 986.298934][T17364] show_stack+0x2c/0x64 00:16:26 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 986.299949][T17364] dump_stack_lvl+0x104/0x16c [ 986.301068][T17364] dump_stack+0x1c/0x58 [ 986.302052][T17364] should_fail+0x1c4/0x1d8 [ 986.303142][T17364] should_fail_usercopy+0x20/0x30 [ 986.304374][T17364] memdup_user+0x9c/0x1b8 [ 986.305428][T17364] strndup_user+0x78/0xb0 [ 986.306479][T17364] __arm64_sys_mount+0x60/0x408 [ 986.307656][T17364] el0_svc_common+0x138/0x220 [ 986.308810][T17364] do_el0_svc+0x48/0x154 [ 986.309914][T17364] el0_svc+0x58/0x150 [ 986.310903][T17364] el0t_64_sync_handler+0x84/0xf0 [ 986.312131][T17364] el0t_64_sync+0x18c/0x190 [ 986.325077][T17363] Dev loop3: unable to read RDB block 1 [ 986.326606][T17363] loop3: unable to read partition table 00:16:26 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001260010a18000000005b490080"], 0x26}}, 0x0) [ 986.337402][T17363] loop3: partition table beyond EOD, truncated [ 986.341762][T17363] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 986.347143][T17363] gfs2: fsid=c: Now mounting FS (format 0)... [ 986.353370][T17363] syz-executor.3: attempt to access beyond end of device 00:16:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 51) [ 986.353370][T17363] loop3: rw=4096, sector=128, nr_sectors = 8 limit=1 [ 986.364848][T17363] gfs2: error 10 reading superblock [ 986.366198][T17363] gfs2: fsid=c: can't read superblock 00:16:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 986.375366][T17363] gfs2: fsid=c: can't read superblock: -5 00:16:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200070a18000000005b490080"], 0x26}}, 0x0) [ 986.395239][T17375] loop2: detected capacity change from 0 to 20 [ 986.397627][ T2560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 986.404705][T17375] FAULT_INJECTION: forcing a failure. [ 986.404705][T17375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.408958][ T2560] Buffer I/O error on dev loop2, logical block 0, async page read [ 986.413419][ T2560] loop2: unable to read partition table [ 986.414990][ T2560] loop2: partition table beyond EOD, truncated [ 986.415464][T17375] CPU: 0 PID: 17375 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 986.418706][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 986.421036][T17375] Call trace: [ 986.421831][T17375] dump_backtrace+0x1b0/0x1dc [ 986.422932][T17375] show_stack+0x2c/0x64 [ 986.423961][T17375] dump_stack_lvl+0x104/0x16c [ 986.425041][T17375] dump_stack+0x1c/0x58 [ 986.426062][T17375] should_fail+0x1c4/0x1d8 [ 986.427188][T17375] should_fail_usercopy+0x20/0x30 [ 986.428357][T17375] memdup_user+0x9c/0x1b8 [ 986.429426][T17375] strndup_user+0x78/0xb0 [ 986.430436][T17375] __arm64_sys_mount+0xa0/0x408 [ 986.431594][T17375] el0_svc_common+0x138/0x220 [ 986.432710][T17375] do_el0_svc+0x48/0x154 [ 986.433690][T17375] el0_svc+0x58/0x150 [ 986.434597][T17375] el0t_64_sync_handler+0x84/0xf0 [ 986.435818][T17375] el0t_64_sync+0x18c/0x190 [ 986.596317][T13923] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 986.966304][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.969055][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.971260][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.974456][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 986.976807][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.726347][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 987.728042][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 987.730377][T13923] usb 1-1: USB disconnect, device number 98 00:16:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x1, 0x0, 0x0, "d4"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:28 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200020a18000000005b490080"], 0x26}}, 0x0) 00:16:28 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 52) 00:16:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 988.181356][T17385] loop2: detected capacity change from 0 to 20 [ 988.184964][T17387] loop3: detected capacity change from 0 to 1 [ 988.186988][T17385] FAULT_INJECTION: forcing a failure. [ 988.186988][T17385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.196397][T17387] Dev loop3: unable to read RDB block 1 [ 988.196586][T17385] CPU: 0 PID: 17385 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 988.197998][T17387] loop3: unable to read partition table 00:16:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200070a18000000005b490080"], 0x26}}, 0x0) [ 988.199962][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 988.199971][T17385] Call trace: [ 988.199973][T17385] dump_backtrace+0x1b0/0x1dc [ 988.199985][T17385] show_stack+0x2c/0x64 [ 988.199992][T17385] dump_stack_lvl+0x104/0x16c [ 988.207782][T17385] dump_stack+0x1c/0x58 [ 988.208791][T17385] should_fail+0x1c4/0x1d8 [ 988.209847][T17385] should_fail_usercopy+0x20/0x30 [ 988.211079][T17385] memdup_user+0x9c/0x1b8 [ 988.211204][T17387] loop3: partition table beyond EOD, [ 988.212132][T17385] strndup_user+0x78/0xb0 [ 988.212143][T17385] __arm64_sys_mount+0xa0/0x408 [ 988.212152][T17385] el0_svc_common+0x138/0x220 [ 988.213520][T17387] truncated [ 988.214501][T17385] do_el0_svc+0x48/0x154 [ 988.218638][T17385] el0_svc+0x58/0x150 [ 988.219623][T17385] el0t_64_sync_handler+0x84/0xf0 [ 988.220985][T17385] el0t_64_sync+0x18c/0x190 00:16:28 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x6}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 988.228746][T17387] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 988.232122][T17387] gfs2: fsid=c: Now mounting FS (format 0)... [ 988.236206][T17387] syz-executor.3: attempt to access beyond end of device [ 988.236206][T17387] loop3: rw=4096, sector=128, nr_sectors = 8 limit=1 [ 988.240674][T17387] gfs2: error 10 reading superblock [ 988.242069][T17387] gfs2: fsid=c: can't read superblock [ 988.243503][T17387] gfs2: fsid=c: can't read superblock: -5 00:16:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200080a18000000005b490080"], 0x26}}, 0x0) 00:16:28 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1100, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18020000005b490080"], 0x26}}, 0x0) [ 988.486388][ T3503] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 988.886349][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.889107][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.891343][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 988.893781][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 988.895537][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.626379][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 989.628019][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 989.630269][ T3503] usb 1-1: USB disconnect, device number 99 00:16:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "b294"}, @main=@item_012={0x1, 0x0, 0x0, "d4"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:30 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:30 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x22c, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18030000005b490080"], 0x26}}, 0x0) 00:16:30 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 53) 00:16:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1200, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 990.084605][T17411] loop2: detected capacity change from 0 to 20 [ 990.090632][T17413] loop3: detected capacity change from 0 to 1 00:16:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18040000005b490080"], 0x26}}, 0x0) [ 990.097923][T17413] Dev loop3: unable to read RDB block 1 [ 990.099351][T17413] loop3: unable to read partition table [ 990.100938][T17413] loop3: partition table beyond EOD, truncated 00:16:30 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18050000005b490080"], 0x26}}, 0x0) [ 990.129837][T17413] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:30 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 54) [ 990.142285][T17420] loop2: detected capacity change from 0 to 20 [ 990.146975][T17413] gfs2: fsid=c: Now mounting FS (format 0)... [ 990.151010][T17413] syz-executor.3: attempt to access beyond end of device [ 990.151010][T17413] loop3: rw=4096, sector=128, nr_sectors = 8 limit=1 [ 990.157088][T17413] gfs2: error 10 reading superblock [ 990.158781][T17413] gfs2: fsid=c: can't read superblock 00:16:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18060000005b490080"], 0x26}}, 0x0) [ 990.161020][T17413] gfs2: fsid=c: can't read superblock: -5 00:16:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 990.177398][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 990.179767][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 990.185510][T12789] ldm_validate_partition_table(): Disk read failed. [ 990.193513][T12789] Dev loop2: unable to read RDB block 0 [ 990.195638][T12789] loop2: unable to read partition table [ 990.197687][T12789] loop2: partition table beyond EOD, truncated [ 990.366393][ T3503] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 990.766331][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.768970][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.771263][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 990.774239][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 990.776297][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.506384][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 991.507823][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 991.510287][ T3503] usb 1-1: USB disconnect, device number 100 00:16:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:31 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0xa}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18080000005b490080"], 0x26}}, 0x0) 00:16:31 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 55) 00:16:31 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1600, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 991.963051][T17434] loop3: detected capacity change from 0 to 1 [ 991.968521][T17437] loop2: detected capacity change from 0 to 20 [ 991.970488][T17437] FAULT_INJECTION: forcing a failure. [ 991.970488][T17437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.972797][T17434] Dev loop3: unable to read RDB block 1 [ 991.975049][T17434] loop3: unable to read partition table [ 991.979236][T17437] CPU: 1 PID: 17437 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 991.981683][T17437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 991.984048][T17437] Call trace: [ 991.984775][T17437] dump_backtrace+0x1b0/0x1dc [ 991.985214][T17434] loop3: partition table beyond EOD, [ 991.985868][T17437] show_stack+0x2c/0x64 [ 991.985878][T17437] dump_stack_lvl+0x104/0x16c [ 991.985888][T17437] dump_stack+0x1c/0x58 [ 991.990320][T17437] should_fail+0x1c4/0x1d8 [ 991.991357][T17437] should_fail_usercopy+0x20/0x30 [ 991.992571][T17437] strncpy_from_user+0x44/0x400 [ 991.993749][T17437] getname_flags+0x84/0x278 [ 991.994852][T17437] user_path_at_empty+0x40/0x114 [ 991.996106][T17437] __arm64_sys_mount+0x2c0/0x408 [ 991.997261][T17437] el0_svc_common+0x138/0x220 [ 991.998460][T17437] do_el0_svc+0x48/0x154 [ 991.999418][T17437] el0_svc+0x58/0x150 [ 992.000328][T17437] el0t_64_sync_handler+0x84/0xf0 [ 992.001500][T17437] el0t_64_sync+0x18c/0x190 [ 992.001935][T17434] truncated 00:16:31 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0xb}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18090000005b490080"], 0x26}}, 0x0) [ 992.021584][T17434] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180a0000005b490080"], 0x26}}, 0x0) [ 992.026672][T17434] gfs2: fsid=c: Now mounting FS (format 0)... [ 992.029155][T17434] syz-executor.3: attempt to access beyond end of device [ 992.029155][T17434] loop3: rw=4096, sector=128, nr_sectors = 8 limit=1 [ 992.033169][T17434] gfs2: error 10 reading superblock [ 992.034495][T17434] gfs2: fsid=c: can't read superblock [ 992.035782][T17434] gfs2: fsid=c: can't read superblock: -5 00:16:32 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0xc}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180c0000005b490080"], 0x26}}, 0x0) 00:16:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1800, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 992.276342][ T3503] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 992.636462][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.639065][ T3503] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.641195][ T3503] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 992.643664][ T3503] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 992.645722][ T3503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.396994][ T3503] usbhid 1-1:8.0: can't add hid device: -71 [ 993.398482][ T3503] usbhid: probe of 1-1:8.0 failed with error -71 [ 993.405836][ T3503] usb 1-1: USB disconnect, device number 101 00:16:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 56) 00:16:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180f0000005b490080"], 0x26}}, 0x0) 00:16:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x353, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:33 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0xd}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1900, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 993.849462][T17460] loop3: detected capacity change from 0 to 1 [ 993.852856][T17462] loop2: detected capacity change from 0 to 20 [ 993.855759][T17460] Dev loop3: unable to read RDB block 1 [ 993.857269][T17460] loop3: unable to read partition table [ 993.858697][T17460] loop3: partition table beyond EOD, truncated 00:16:33 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0xf}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18100000005b490080"], 0x26}}, 0x0) 00:16:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 57) [ 993.882129][T17460] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 993.883913][T17460] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:33 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x11}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 993.898089][T17460] syz-executor.3: attempt to access beyond end of device [ 993.898089][T17460] loop3: rw=4096, sector=128, nr_sectors = 8 limit=1 [ 993.902922][T17469] loop2: detected capacity change from 0 to 20 [ 993.903179][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 00:16:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2500, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 993.916934][T17469] ERROR: Out of memory at tomoyo_realpath_from_path. [ 993.926886][T17460] gfs2: error 10 reading superblock [ 993.929433][T17460] gfs2: fsid=c: can't read superblock [ 993.930737][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 993.933702][T17460] gfs2: fsid=c: can't read superblock: -5 00:16:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18600000005b490080"], 0x26}}, 0x0) [ 993.947622][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.953699][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 993.962231][T12789] ldm_validate_partition_table(): Disk read failed. [ 993.967112][T12789] Dev loop2: unable to read RDB block 0 [ 993.968674][T12789] loop2: unable to read partition table [ 993.970263][T12789] loop2: partition table beyond EOD, truncated [ 994.136372][T13924] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 994.526323][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.529079][T13924] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.531286][T13924] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 994.534153][T13924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 994.536343][T13924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.276520][T13924] usbhid 1-1:8.0: can't add hid device: -71 [ 995.278011][T13924] usbhid: probe of 1-1:8.0 failed with error -71 [ 995.280525][T13924] usb 1-1: USB disconnect, device number 102 00:16:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:35 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x12}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000300005b490080"], 0x26}}, 0x0) 00:16:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4c08, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:35 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 58) 00:16:35 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x402, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 995.740252][T17484] loop2: detected capacity change from 0 to 20 [ 995.742510][T17485] loop3: detected capacity change from 0 to 2 [ 995.749558][T17485] Dev loop3: unable to read RDB block 2 [ 995.750899][T17485] loop3: unable to read partition table 00:16:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000500005b490080"], 0x26}}, 0x0) [ 995.752914][T17485] loop3: partition table beyond EOD, truncated 00:16:35 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 995.758633][T17485] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 995.760359][T17485] gfs2: fsid=c: Now mounting FS (format 0)... [ 995.762026][T17485] syz-executor.3: attempt to access beyond end of device [ 995.762026][T17485] loop3: rw=4096, sector=128, nr_sectors = 8 limit=2 [ 995.778450][T17485] gfs2: error 10 reading superblock [ 995.779741][T17485] gfs2: fsid=c: can't read superblock [ 995.780966][T17485] gfs2: fsid=c: can't read superblock: -5 00:16:35 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 59) 00:16:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000600005b490080"], 0x26}}, 0x0) 00:16:35 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x17}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 995.820835][T17493] loop2: detected capacity change from 0 to 20 [ 995.823757][T17493] ERROR: Out of memory at tomoyo_realpath_from_path. 00:16:35 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x18}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 996.016330][T13923] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 996.376423][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.378982][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.381074][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 996.383912][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 996.385931][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.136533][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 997.137943][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 997.140168][T13923] usb 1-1: USB disconnect, device number 103 00:16:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000900005b490080"], 0x26}}, 0x0) 00:16:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5800, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:37 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x19}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:37 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 60) 00:16:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local, @main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x406, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 997.599269][T17507] loop2: detected capacity change from 0 to 20 [ 997.599560][T17509] loop3: detected capacity change from 0 to 2 [ 997.606696][T17507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 997.608271][T17509] Dev loop3: unable to read RDB block 2 [ 997.609819][T17509] loop3: unable to read partition table [ 997.611343][T17509] loop3: partition table beyond EOD, truncated 00:16:37 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1a}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000a00005b490080"], 0x26}}, 0x0) [ 997.625789][T17509] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 997.636308][T17509] gfs2: fsid=c: Now mounting FS (format 0)... [ 997.640398][T17509] syz-executor.3: attempt to access beyond end of device [ 997.640398][T17509] loop3: rw=4096, sector=128, nr_sectors = 8 limit=2 [ 997.647818][T17509] gfs2: error 10 reading superblock [ 997.649100][T17509] gfs2: fsid=c: can't read superblock 00:16:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000c00005b490080"], 0x26}}, 0x0) [ 997.652875][T17509] gfs2: fsid=c: can't read superblock: -5 00:16:37 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1b}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:37 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 61) [ 997.698627][T17525] loop2: detected capacity change from 0 to 20 [ 997.700530][T17525] ERROR: Out of memory at tomoyo_realpath_from_path. 00:16:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18c00e00005b490080"], 0x26}}, 0x0) 00:16:37 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1c}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000f00005b490080"], 0x26}}, 0x0) 00:16:37 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1d}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 997.752965][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.755310][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 997.758263][T12789] ldm_validate_partition_table(): Disk read failed. [ 997.759830][T12789] Dev loop2: unable to read RDB block 0 [ 997.768243][T12789] loop2: unable to read partition table [ 997.769614][T12789] loop2: partition table beyond EOD, truncated [ 997.886301][ T3504] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 998.276333][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.279042][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.281195][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 998.283593][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 998.285478][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.026331][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 999.027780][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 999.029972][ T3504] usb 1-1: USB disconnect, device number 104 00:16:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18560f00005b490080"], 0x26}}, 0x0) 00:16:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x500, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7800, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 62) 00:16:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local, @main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) [ 999.489483][T17541] loop2: detected capacity change from 0 to 20 [ 999.490981][T17542] loop3: detected capacity change from 0 to 2 [ 999.491574][T17541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 999.499529][T17542] Dev loop3: unable to read RDB block 2 [ 999.501302][T17542] loop3: unable to read partition table 00:16:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18884700005b490080"], 0x26}}, 0x0) 00:16:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x22}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 999.508535][T17542] loop3: partition table beyond EOD, truncated [ 999.520080][T17542] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 999.522044][T17542] gfs2: fsid=c: Now mounting FS (format 0)... [ 999.533086][T17542] syz-executor.3: attempt to access beyond end of device [ 999.533086][T17542] loop3: rw=4096, sector=128, nr_sectors = 8 limit=2 00:16:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 63) 00:16:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x24}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 999.551094][T17542] gfs2: error 10 reading superblock [ 999.555932][T17542] gfs2: fsid=c: can't read superblock [ 999.562093][T17542] gfs2: fsid=c: can't read superblock: -5 00:16:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18884800005b490080"], 0x26}}, 0x0) [ 999.570089][T17552] loop2: detected capacity change from 0 to 20 00:16:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x25}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x600, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 64) 00:16:39 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x26}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180f5600005b490080"], 0x26}}, 0x0) [ 999.677011][T17565] loop2: detected capacity change from 0 to 20 [ 999.711517][T17567] loop3: detected capacity change from 0 to 3 [ 999.715286][T17567] Dev loop3: unable to read RDB block 3 [ 999.726797][T17567] loop3: unable to read partition table [ 999.728311][T17567] loop3: partition table beyond EOD, truncated [ 999.730366][T17567] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 999.732104][T17567] gfs2: fsid=c: Now mounting FS (format 0)... [ 999.733864][T17567] syz-executor.3: attempt to access beyond end of device [ 999.733864][T17567] loop3: rw=4096, sector=128, nr_sectors = 8 limit=3 [ 999.742239][T17567] gfs2: error 10 reading superblock [ 999.743653][T17567] gfs2: fsid=c: can't read superblock [ 999.744971][T17567] gfs2: fsid=c: can't read superblock: -5 [ 999.776393][T13923] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1000.146995][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.149557][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.151790][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.154752][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1000.157030][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.876437][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 1000.877966][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 1000.880552][T13923] usb 1-1: USB disconnect, device number 105 00:16:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x7, {[@local, @main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18655800005b490080"], 0x26}}, 0x0) 00:16:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:41 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x27}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 65) 00:16:41 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x604, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 1001.340879][T17572] loop2: detected capacity change from 0 to 20 [ 1001.342378][T17573] loop3: detected capacity change from 0 to 3 [ 1001.356377][T17573] Dev loop3: unable to read RDB block 3 00:16:41 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x28}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18006000005b490080"], 0x26}}, 0x0) [ 1001.358826][T17573] loop3: unable to read partition table [ 1001.373435][T17573] loop3: partition table beyond EOD, truncated 00:16:41 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x29}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1001.378515][T17573] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1001.383608][T17573] gfs2: fsid=c: Now mounting FS (format 0)... [ 1001.387778][T17573] syz-executor.3: attempt to access beyond end of device [ 1001.387778][T17573] loop3: rw=4096, sector=128, nr_sectors = 8 limit=3 00:16:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 66) [ 1001.411204][T17573] gfs2: error 10 reading superblock [ 1001.412651][T17573] gfs2: fsid=c: can't read superblock [ 1001.413892][T17573] gfs2: fsid=c: can't read superblock: -5 00:16:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18586500005b490080"], 0x26}}, 0x0) [ 1001.421951][T17587] loop2: detected capacity change from 0 to 20 00:16:41 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x2a}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1001.431760][T17587] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1001.438588][T17587] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1001.445121][T17587] syz-executor.2: attempt to access beyond end of device [ 1001.445121][T17587] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 1001.451513][T17587] syz-executor.2: attempt to access beyond end of device [ 1001.451513][T17587] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 1001.458699][T17587] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1001.636280][ T3504] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1002.016417][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.018954][ T3504] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.021065][ T3504] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1002.023984][ T3504] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1002.026015][ T3504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.756316][ T3504] usbhid 1-1:8.0: can't add hid device: -71 [ 1002.757868][ T3504] usbhid: probe of 1-1:8.0 failed with error -71 [ 1002.760176][ T3504] usb 1-1: USB disconnect, device number 106 00:16:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x0, "b2"}, @main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18008100005b490080"], 0x26}}, 0x0) 00:16:43 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x2b}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:43 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x700, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:43 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 67) [ 1003.217455][T17598] loop2: detected capacity change from 0 to 20 [ 1003.220395][T17600] loop3: detected capacity change from 0 to 3 00:16:43 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x2c}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1003.233094][T17598] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1003.233197][T17600] Dev loop3: unable to read RDB block 3 [ 1003.234891][T17598] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18478800005b490080"], 0x26}}, 0x0) [ 1003.242006][T17600] loop3: unable to read partition table [ 1003.243005][T17598] syz-executor.2: attempt to access beyond end of device [ 1003.243005][T17598] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 1003.245783][T17600] loop3: partition table beyond EOD, truncated [ 1003.254409][T17600] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1003.259191][T17600] gfs2: fsid=c: Now mounting FS (format 0)... [ 1003.261007][T17600] syz-executor.3: attempt to access beyond end of device [ 1003.261007][T17600] loop3: rw=4096, sector=128, nr_sectors = 8 limit=3 [ 1003.264290][T17600] gfs2: error 10 reading superblock [ 1003.265549][T17600] gfs2: fsid=c: can't read superblock [ 1003.272096][T17598] syz-executor.2: attempt to access beyond end of device [ 1003.272096][T17598] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 1003.276564][T17600] gfs2: fsid=c: can't read superblock: -5 [ 1003.283500][T17598] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:43 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x2d}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18488800005b490080"], 0x26}}, 0x0) 00:16:43 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x2e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1003.496293][T13923] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1003.856321][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.858862][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.861037][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1003.863963][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1003.866019][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.606393][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 1004.607868][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 1004.610146][T13923] usb 1-1: USB disconnect, device number 107 00:16:45 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 68) 00:16:45 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x900, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180ec000005b490080"], 0x26}}, 0x0) 00:16:45 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x2f}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x0, "b2"}, @main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1005.062349][T17622] loop3: detected capacity change from 0 to 4 [ 1005.065978][T17624] loop2: detected capacity change from 0 to 20 [ 1005.073626][T17624] warn_alloc: 1 callbacks suppressed [ 1005.073634][T17624] syz-executor.2: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 1005.079432][T17622] Dev loop3: unable to read RDB block 4 00:16:45 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x30}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1005.084388][T17622] loop3: unable to read partition table [ 1005.085986][T17622] loop3: partition table beyond EOD, truncated [ 1005.089089][T17622] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18004003005b490080"], 0x26}}, 0x0) [ 1005.093670][T17624] CPU: 1 PID: 17624 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1005.096059][T17624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1005.098353][T17624] Call trace: [ 1005.099090][T17624] dump_backtrace+0x1b0/0x1dc [ 1005.100175][T17624] show_stack+0x2c/0x64 [ 1005.101204][T17624] dump_stack_lvl+0x104/0x16c [ 1005.102301][T17624] dump_stack+0x1c/0x58 [ 1005.103297][T17624] warn_alloc+0x114/0x180 [ 1005.104271][T17624] __vmalloc_node_range+0x120/0x1ec [ 1005.105524][T17624] vzalloc+0x98/0xb0 [ 1005.106439][T17624] bdev_disk_changed+0x254/0x63c [ 1005.107643][T17624] blkdev_get_whole+0x1b0/0x1f8 [ 1005.108816][T17624] blkdev_get_by_dev+0x178/0x2fc [ 1005.110011][T17624] blkdev_get_by_path+0x10c/0x1cc [ 1005.111260][T17624] mount_bdev+0x5c/0x210 [ 1005.112317][T17624] f2fs_mount+0x44/0x58 [ 1005.113276][T17624] legacy_get_tree+0x30/0x74 [ 1005.114346][T17624] vfs_get_tree+0x40/0x140 [ 1005.115436][T17624] do_new_mount+0x1dc/0x4e4 [ 1005.116572][T17624] path_mount+0x358/0x914 [ 1005.117599][T17624] __arm64_sys_mount+0x2f8/0x408 [ 1005.118744][T17624] el0_svc_common+0x138/0x220 [ 1005.119831][T17624] do_el0_svc+0x48/0x154 [ 1005.120879][T17624] el0_svc+0x58/0x150 [ 1005.121876][T17624] el0t_64_sync_handler+0x84/0xf0 [ 1005.123068][T17624] el0t_64_sync+0x18c/0x190 [ 1005.126903][T17622] gfs2: fsid=c: Now mounting FS (format 0)... [ 1005.129559][T17622] syz-executor.3: attempt to access beyond end of device [ 1005.129559][T17622] loop3: rw=4096, sector=128, nr_sectors = 8 limit=4 [ 1005.132638][T17622] gfs2: error 10 reading superblock [ 1005.133762][T17622] gfs2: fsid=c: can't read superblock [ 1005.134942][T17622] gfs2: fsid=c: can't read superblock: -5 00:16:45 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x31}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1005.150479][T17624] Mem-Info: 00:16:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000340005b490080"], 0x26}}, 0x0) [ 1005.165748][T17624] active_anon:976 inactive_anon:136539 isolated_anon:0 [ 1005.165748][T17624] active_file:3036 inactive_file:7658 isolated_file:0 [ 1005.165748][T17624] unevictable:768 dirty:0 writeback:0 [ 1005.165748][T17624] slab_reclaimable:17704 slab_unreclaimable:111663 [ 1005.165748][T17624] mapped:19087 shmem:2272 pagetables:2906 bounce:0 [ 1005.165748][T17624] kernel_misc_reclaimable:0 [ 1005.165748][T17624] free:1661420 free_pcp:5231 free_cma:7360 00:16:45 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x32}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1005.184368][T17624] Node 0 active_anon:3904kB inactive_anon:546156kB active_file:12144kB inactive_file:30632kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:76348kB dirty:0kB writeback:0kB shmem:9088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB kernel_stack:8272kB pagetables:11624kB all_unreclaimable? no 00:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1005.220367][T17624] Node 0 DMA free:3076736kB boost:0kB min:17256kB low:21568kB high:25880kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080064kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:29440kB [ 1005.233542][T17624] lowmem_reserve[]: 0 0 4843 4843 4843 [ 1005.235088][T17624] Node 0 Normal free:3568944kB boost:0kB min:27796kB low:34744kB high:41692kB reserved_highatomic:0KB active_anon:3904kB inactive_anon:546040kB active_file:12144kB inactive_file:30632kB unevictable:3072kB writepending:0kB present:5242880kB managed:4961968kB mlocked:0kB bounce:0kB free_pcp:21244kB local_pcp:10240kB free_cma:0kB [ 1005.245486][T17624] lowmem_reserve[]: 0 0 0 0 0 [ 1005.251298][T17624] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (M) 2*256kB (MC) 2*512kB (MC) 1*1024kB (M) 3*2048kB (MC) 749*4096kB (MC) = 3076736kB [ 1005.254656][T17624] Node 0 Normal: 360*4kB (UE) 388*8kB (U) 157*16kB (UM) 61*32kB (UM) 146*64kB (UME) 93*128kB (UME) 39*256kB (UM) 32*512kB (UME) 20*1024kB (UME) 15*2048kB (U) 845*4096kB (UM) = 3568944kB [ 1005.264026][T17624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.266116][T17624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 1005.268480][T17624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1005.270724][T17624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 1005.272921][T17624] 12807 total pagecache pages [ 1005.274058][T17624] 0 pages in swap cache [ 1005.275055][T17624] Free swap = 0kB [ 1005.276018][T17624] Total swap = 0kB [ 1005.277603][T17624] 2097152 pages RAM [ 1005.278474][T17624] 0 pages HighMem/MovableOnly [ 1005.279677][T17624] 86644 pages reserved [ 1005.280556][T17624] 8192 pages cma reserved [ 1005.281644][T17624] 0 pages hwpoisoned [ 1005.282866][T17624] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1005.284625][T17624] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1005.288543][T17624] syz-executor.2: attempt to access beyond end of device [ 1005.288543][T17624] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 1005.292079][T17624] syz-executor.2: attempt to access beyond end of device [ 1005.292079][T17624] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 1005.295593][T17624] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:45 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x34}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000015b490080"], 0x26}}, 0x0) 00:16:45 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x9ff, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:45 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 69) [ 1005.361330][T13923] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1005.363607][T17644] loop3: detected capacity change from 0 to 4 [ 1005.379485][T17644] Dev loop3: unable to read RDB block 4 [ 1005.380899][T17644] loop3: unable to read partition table [ 1005.382164][T17644] loop3: partition table beyond EOD, truncated [ 1005.384004][T17644] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1005.385537][T17644] gfs2: fsid=c: Now mounting FS (format 0)... [ 1005.390663][T17647] loop2: detected capacity change from 0 to 20 [ 1005.393798][T17647] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1005.399113][T17647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1005.399788][T17644] syz-executor.3: attempt to access beyond end of device [ 1005.399788][T17644] loop3: rw=4096, sector=128, nr_sectors = 8 limit=4 [ 1005.402489][T17647] syz-executor.2: attempt to access beyond end of device [ 1005.402489][T17647] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 1005.404004][T17644] gfs2: error 10 reading superblock [ 1005.404024][T17644] gfs2: fsid=c: can't read superblock [ 1005.404031][T17644] gfs2: fsid=c: can't read superblock: -5 [ 1005.415638][T17647] syz-executor.2: attempt to access beyond end of device [ 1005.415638][T17647] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 1005.421957][T17647] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1005.766375][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.769218][T13923] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.771457][T13923] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1005.774467][T13923] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1005.776634][T13923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.517018][T13923] usbhid 1-1:8.0: can't add hid device: -71 [ 1006.518556][T13923] usbhid: probe of 1-1:8.0 failed with error -71 [ 1006.520783][T13923] usb 1-1: USB disconnect, device number 108 00:16:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x0, "b2"}, @main=@item_012={0x2, 0x0, 0x0, "d450"}, @main=@item_012={0x2, 0x0, 0x0, "ee30"}]}}, 0x0}, 0x0) 00:16:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000025b490080"], 0x26}}, 0x0) 00:16:46 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x35}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 70) 00:16:46 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 1006.972960][T17653] loop2: detected capacity change from 0 to 20 [ 1006.975409][T17655] loop3: detected capacity change from 0 to 5 [ 1006.986494][T17655] Dev loop3: unable to read RDB block 5 [ 1006.987977][T17655] loop3: unable to read partition table [ 1006.989161][T17653] loop2: unable to read partition table [ 1006.989588][T17655] loop3: partition table beyond EOD, [ 1006.990861][T17653] loop2: partition table beyond EOD, [ 1006.990902][T17655] truncated [ 1006.991987][T17653] truncated [ 1006.992075][T17653] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1006.996194][T17653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1006.996896][T17655] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1007.000793][T17655] gfs2: fsid=c: Now mounting FS (format 0)... [ 1007.002910][T17653] syz-executor.2: attempt to access beyond end of device [ 1007.002910][T17653] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 [ 1007.005904][T17655] syz-executor.3: attempt to access beyond end of device [ 1007.005904][T17655] loop3: rw=4096, sector=128, nr_sectors = 8 limit=5 00:16:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000035b490080"], 0x26}}, 0x0) 00:16:47 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x36}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1007.024582][T17655] gfs2: error 10 reading superblock [ 1007.025208][T17653] syz-executor.2: attempt to access beyond end of device [ 1007.025208][T17653] loop2: rw=12288, sector=8192, nr_sectors = 8 limit=20 [ 1007.027984][T17655] gfs2: fsid=c: can't read superblock [ 1007.030454][T17655] gfs2: fsid=c: can't read superblock: -5 [ 1007.033401][T17653] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000045b490080"], 0x26}}, 0x0) 00:16:47 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x37}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000055b490080"], 0x26}}, 0x0) 00:16:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1007.286354][ T7131] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1007.676371][ T7131] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.679071][ T7131] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.681310][ T7131] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1007.684182][ T7131] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1007.686201][ T7131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.426404][ T7131] usbhid 1-1:8.0: can't add hid device: -71 [ 1008.427952][ T7131] usbhid: probe of 1-1:8.0 failed with error -71 [ 1008.430186][ T7131] usb 1-1: USB disconnect, device number 109 00:16:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000065b490080"], 0x26}}, 0x0) 00:16:48 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 71) [ 1008.881656][T17674] loop2: detected capacity change from 0 to 20 00:16:48 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x38}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:48 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa36, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 1008.890275][T17679] loop3: detected capacity change from 0 to 5 00:16:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x84c0000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:48 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x39}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1008.906976][T17679] Dev loop3: unable to read RDB block 5 [ 1008.913358][T17674] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1008.913850][T17679] loop3: unable to read partition table [ 1008.915314][T17674] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1008.918683][T17679] loop3: partition table beyond EOD, truncated [ 1008.919263][T17674] syz-executor.2: attempt to access beyond end of device [ 1008.919263][T17674] loop2: rw=12288, sector=4096, nr_sectors = 8 limit=20 00:16:48 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000085b490080"], 0x26}}, 0x0) [ 1008.932812][T17679] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1008.936385][T17679] gfs2: fsid=c: Now mounting FS (format 0)... [ 1008.936489][T17674] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1008.941373][T17679] gfs2: error 10 reading superblock [ 1008.942729][T17679] gfs2: fsid=c: can't read superblock 00:16:48 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1008.949709][T17679] gfs2: fsid=c: can't read superblock: -5 00:16:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000095b490080"], 0x26}}, 0x0) 00:16:48 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3d}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180000000a5b490080"], 0x26}}, 0x0) 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 72) 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180000000c5b490080"], 0x26}}, 0x0) 00:16:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xb00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a180000000f5b490080"], 0x26}}, 0x0) [ 1009.064452][T17703] loop3: detected capacity change from 0 to 5 [ 1009.073543][T17703] Dev loop3: unable to read RDB block 5 [ 1009.075078][T17703] loop3: unable to read partition table [ 1009.079548][T17708] loop2: detected capacity change from 0 to 20 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.088874][T17703] loop3: partition table beyond EOD, truncated [ 1009.090796][T17703] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x41}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.101589][ T2560] loop2: unable to read partition table [ 1009.103030][ T2560] loop2: partition table beyond EOD, truncated [ 1009.108155][T17703] gfs2: fsid=c: Now mounting FS (format 0)... [ 1009.109911][T17703] gfs2: error 10 reading superblock 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000105b490080"], 0x26}}, 0x0) [ 1009.116374][T17703] gfs2: fsid=c: can't read superblock 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.121183][T17703] gfs2: fsid=c: can't read superblock: -5 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 73) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000f565b490080"], 0x26}}, 0x0) [ 1009.173273][T17723] loop2: detected capacity change from 0 to 20 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.190534][T17723] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.194789][T17723] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x43}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.204290][T17723] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000605b490080"], 0x26}}, 0x0) [ 1009.220266][T17731] loop3: detected capacity change from 0 to 6 [ 1009.230545][T17731] Dev loop3: unable to read RDB block 6 [ 1009.234671][T17731] loop3: unable to read partition table 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 74) 00:16:49 executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000058655b490080"], 0x26}}, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x44}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.243030][T17731] loop3: partition table beyond EOD, truncated 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xb000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1009.257205][T17731] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1009.259180][T17731] gfs2: fsid=c: Now mounting FS (format 0)... [ 1009.276492][T17731] gfs2: error 10 reading superblock [ 1009.277829][T17731] gfs2: fsid=c: can't read superblock [ 1009.278417][T17741] loop2: detected capacity change from 0 to 20 [ 1009.279157][T17731] gfs2: fsid=c: can't read superblock: -5 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x45}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.303575][T17741] loop2: unable to read partition table 00:16:49 executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.309662][T17741] loop2: partition table beyond EOD, truncated 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000000815b490080"], 0x26}}, 0x0) [ 1009.314970][T17741] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.320284][T17741] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1009.328366][T17741] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:49 executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xd00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x78}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1009.365393][T26746] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1009.381597][T17756] loop3: detected capacity change from 0 to 6 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 75) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000047885b490080"], 0x26}}, 0x0) [ 1009.385788][ T6797] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1009.401187][ T6797] Buffer I/O error on dev loop3, logical block 0, async page read 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x300}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000048885b490080"], 0x26}}, 0x0) [ 1009.407730][T17761] loop2: detected capacity change from 0 to 20 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.411790][ T6797] Dev loop3: unable to read RDB block 6 [ 1009.414527][T17761] Dev loop2: unable to read RDB block 8 [ 1009.421516][T17761] loop2: unable to read partition table [ 1009.426595][ T6797] loop3: unable to read partition table [ 1009.428109][ T6797] loop3: partition table beyond EOD, truncated [ 1009.430110][T17756] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1009.433237][T17756] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18ffffa8885b490080"], 0x26}}, 0x0) [ 1009.437565][T17756] gfs2: error 10 reading superblock 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xd000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1009.450854][T17756] gfs2: fsid=c: can't read superblock [ 1009.454269][T17756] gfs2: fsid=c: can't read superblock: -5 [ 1009.455935][T17761] loop2: partition table beyond EOD, truncated 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x861e55d2}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.471645][T17761] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.473488][T17761] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1009.494916][T17761] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 76) [ 1009.537985][T17836] loop2: detected capacity change from 0 to 20 [ 1009.543291][T17836] loop2: unable to read partition table 00:16:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xe00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18ffffff9e5b490080"], 0x26}}, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8eaa2ab4}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.549012][T17836] loop2: partition table beyond EOD, truncated 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1009.573947][T17881] loop3: detected capacity change from 0 to 7 [ 1009.574710][T17836] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.583368][T17836] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0xa3e644a8}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000ec05b490080"], 0x26}}, 0x0) [ 1009.591808][T17836] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1009.595152][T17881] Dev loop3: unable to read RDB block 7 [ 1009.606783][T17881] loop3: unable to read partition table [ 1009.608317][T17881] loop3: partition table beyond EOD, truncated [ 1009.610216][T17881] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 77) [ 1009.626323][T17881] gfs2: fsid=c: Now mounting FS (format 0)... [ 1009.628140][T17881] gfs2: error 10 reading superblock [ 1009.629411][T17881] gfs2: fsid=c: can't read superblock 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18ffffffef5b490080"], 0x26}}, 0x0) [ 1009.647021][T17881] gfs2: fsid=c: can't read superblock: -5 [ 1009.651057][T17894] loop2: detected capacity change from 0 to 20 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0xb9ca51d1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.664195][T17894] loop2: unable to read partition table [ 1009.673587][T17894] loop2: partition table beyond EOD, truncated [ 1009.680828][T17894] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.690807][T17894] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18fffffff05b490080"], 0x26}}, 0x0) [ 1009.706169][T17894] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1888a8ffff5b490080"], 0x26}}, 0x0) 00:16:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xf00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 78) 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a187fffffff5b490080"], 0x26}}, 0x0) [ 1009.814570][T18014] loop2: detected capacity change from 0 to 20 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x2}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.821380][T18014] loop2: unable to read partition table [ 1009.824112][T18014] loop2: partition table beyond EOD, truncated [ 1009.826830][T18014] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.828384][T18018] loop3: detected capacity change from 0 to 7 [ 1009.828791][T18014] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1009.836938][T18014] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1009.849336][T18018] Dev loop3: unable to read RDB block 7 [ 1009.850881][T18018] loop3: unable to read partition table 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a189effffff5b490080"], 0x26}}, 0x0) [ 1009.870077][T18018] loop3: partition table beyond EOD, truncated 00:16:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 79) [ 1009.893779][T18018] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1009.895593][T18018] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1009.904575][T18018] gfs2: error 10 reading superblock [ 1009.905910][T18018] gfs2: fsid=c: can't read superblock [ 1009.907277][T18018] gfs2: fsid=c: can't read superblock: -5 [ 1009.922661][T18129] loop2: detected capacity change from 0 to 20 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18efffffff5b490080"], 0x26}}, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x4}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.934449][T18129] loop2: unable to read partition table [ 1009.936140][T18129] loop2: partition table beyond EOD, truncated 00:16:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1020, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:49 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18f0ffffff5b490080"], 0x26}}, 0x0) 00:16:49 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1009.999635][T18140] loop3: detected capacity change from 0 to 8 00:16:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 80) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x12000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1010.024549][T12789] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000200005b490080"], 0x26}}, 0x0) [ 1010.035273][T18147] loop2: detected capacity change from 0 to 20 [ 1010.041522][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x6}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.052546][T18140] Dev loop3: unable to read RDB block 8 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000300005b490080"], 0x26}}, 0x0) [ 1010.053947][T18140] loop3: unable to read partition table [ 1010.055730][T18140] loop3: partition table beyond EOD, truncated [ 1010.058709][T18140] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1010.061752][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 1010.064518][T18140] gfs2: fsid=c: Now mounting FS (format 0)... [ 1010.070590][T18140] gfs2: error 10 reading superblock 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x7}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.082243][T18140] gfs2: fsid=c: can't read superblock [ 1010.087440][T18140] gfs2: fsid=c: can't read superblock: -5 [ 1010.088940][T12789] loop2: unable to read partition table [ 1010.092616][T12789] loop2: partition table beyond EOD, truncated [ 1010.100705][T18147] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1010.102506][T18147] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1010.104432][T18147] kmem_cache_create_usercopy(f2fs_xattr_entry-7:2) failed with error -22 [ 1010.123897][T18147] CPU: 0 PID: 18147 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1010.126421][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1010.128709][T18147] Call trace: [ 1010.129437][T18147] dump_backtrace+0x1b0/0x1dc [ 1010.130521][T18147] show_stack+0x2c/0x64 [ 1010.131552][T18147] dump_stack_lvl+0x104/0x16c [ 1010.132752][T18147] dump_stack+0x1c/0x58 [ 1010.133785][T18147] kmem_cache_create_usercopy+0x268/0x31c [ 1010.135139][T18147] kmem_cache_create+0x1c/0x28 [ 1010.136227][T18147] f2fs_init_xattr_caches+0x78/0xb4 [ 1010.137479][T18147] f2fs_fill_super+0x1050/0x1e0c [ 1010.138612][T18147] mount_bdev+0x1b8/0x210 [ 1010.139615][T18147] f2fs_mount+0x44/0x58 [ 1010.140582][T18147] legacy_get_tree+0x30/0x74 [ 1010.141718][T18147] vfs_get_tree+0x40/0x140 [ 1010.142769][T18147] do_new_mount+0x1dc/0x4e4 [ 1010.143827][T18147] path_mount+0x358/0x914 [ 1010.144868][T18147] __arm64_sys_mount+0x2f8/0x408 [ 1010.146080][T18147] el0_svc_common+0x138/0x220 [ 1010.147152][T18147] do_el0_svc+0x48/0x154 [ 1010.148197][T18147] el0_svc+0x58/0x150 [ 1010.149128][T18147] el0t_64_sync_handler+0x84/0xf0 [ 1010.150427][T18147] el0t_64_sync+0x18c/0x190 00:16:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1100, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000400005b490080"], 0x26}}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x8}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 81) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x14000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.227640][T18167] loop3: detected capacity change from 0 to 8 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000500005b490080"], 0x26}}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x9}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.239783][T18167] Dev loop3: unable to read RDB block 8 [ 1010.256262][T18167] loop3: unable to read partition table [ 1010.257804][T18167] loop3: partition table beyond EOD, truncated [ 1010.259605][T18167] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1010.261222][T18167] gfs2: fsid=c: Now mounting FS (format 0)... [ 1010.273901][T18177] loop2: detected capacity change from 0 to 20 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000600005b490080"], 0x26}}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.284430][T18167] bio_check_eod: 20 callbacks suppressed [ 1010.284437][T18167] syz-executor.3: attempt to access beyond end of device [ 1010.284437][T18167] loop3: rw=4096, sector=128, nr_sectors = 8 limit=8 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xa}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.292908][T18177] loop2: unable to read partition table [ 1010.294446][T18177] loop2: partition table beyond EOD, truncated [ 1010.324402][T18167] gfs2: error 10 reading superblock [ 1010.333686][T18167] gfs2: fsid=c: can't read superblock [ 1010.346199][T18167] gfs2: fsid=c: can't read superblock: -5 00:16:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 82) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x16000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000800005b490080"], 0x26}}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xb}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1200, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) [ 1010.420818][T18192] loop2: detected capacity change from 0 to 20 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.434304][T18195] loop3: detected capacity change from 0 to 9 [ 1010.437827][ T2560] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1010.440251][T18192] loop2: unable to read partition table [ 1010.441695][T18192] loop2: partition table beyond EOD, truncated 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xc}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.451013][ T2560] Buffer I/O error on dev loop3, logical block 0, async page read 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000900005b490080"], 0x26}}, 0x0) [ 1010.455975][ T2560] Dev loop3: unable to read RDB block 9 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, 0x0, 0x0) [ 1010.464319][ T2560] loop3: unable to read partition table [ 1010.470094][ T2560] loop3: partition table beyond EOD, truncated [ 1010.473414][T18195] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000a00005b490080"], 0x26}}, 0x0) [ 1010.475743][T18195] gfs2: fsid=c: Now mounting FS (format 0)... [ 1010.480905][T18195] syz-executor.3: attempt to access beyond end of device [ 1010.480905][T18195] loop3: rw=4096, sector=128, nr_sectors = 8 limit=9 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xd}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.492505][T18195] gfs2: error 10 reading superblock [ 1010.496507][T18195] gfs2: fsid=c: can't read superblock [ 1010.501279][T18195] gfs2: fsid=c: can't read superblock: -5 00:16:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 83) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x18000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000c00005b490080"], 0x26}}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xe}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.541317][T18212] loop2: detected capacity change from 0 to 20 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, 0x0, 0x0) [ 1010.550287][T18212] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1010.555882][T18212] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1010.563920][T18212] kobject_add_internal failed for :a-0000208 (error: -12 parent: slab) [ 1010.572466][T18212] kmem_cache_create_usercopy(f2fs_xattr_entry-7:2) failed with error -12 [ 1010.578203][T18212] CPU: 1 PID: 18212 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1010.580613][T18212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1010.582956][T18212] Call trace: [ 1010.583790][T18212] dump_backtrace+0x1b0/0x1dc [ 1010.584950][T18212] show_stack+0x2c/0x64 [ 1010.585911][T18212] dump_stack_lvl+0x104/0x16c [ 1010.587074][T18212] dump_stack+0x1c/0x58 [ 1010.588056][T18212] kmem_cache_create_usercopy+0x268/0x31c [ 1010.589418][T18212] kmem_cache_create+0x1c/0x28 [ 1010.590516][T18212] f2fs_init_xattr_caches+0x78/0xb4 [ 1010.591760][T18212] f2fs_fill_super+0x1050/0x1e0c [ 1010.592965][T18212] mount_bdev+0x1b8/0x210 [ 1010.594010][T18212] f2fs_mount+0x44/0x58 [ 1010.595092][T18212] legacy_get_tree+0x30/0x74 [ 1010.596186][T18212] vfs_get_tree+0x40/0x140 [ 1010.597233][T18212] do_new_mount+0x1dc/0x4e4 [ 1010.598299][T18212] path_mount+0x358/0x914 [ 1010.599389][T18212] __arm64_sys_mount+0x2f8/0x408 [ 1010.600590][T18212] el0_svc_common+0x138/0x220 [ 1010.601709][T18212] do_el0_svc+0x48/0x154 [ 1010.602711][T18212] el0_svc+0x58/0x150 [ 1010.603702][T18212] el0t_64_sync_handler+0x84/0xf0 [ 1010.604869][T18212] el0t_64_sync+0x18c/0x190 00:16:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000f00005b490080"], 0x26}}, 0x0) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x10}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, 0x0, 0x0) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x19000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1010.634497][T18224] loop3: detected capacity change from 0 to 9 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18001000005b490080"], 0x26}}, 0x0) [ 1010.666120][T18224] Dev loop3: unable to read RDB block 9 [ 1010.669881][T18224] loop3: unable to read partition table 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.682036][T18224] loop3: partition table beyond EOD, truncated [ 1010.691829][T18224] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1010.693670][T18224] gfs2: fsid=c: Now mounting FS (format 0)... [ 1010.695316][T18224] syz-executor.3: attempt to access beyond end of device [ 1010.695316][T18224] loop3: rw=4096, sector=128, nr_sectors = 8 limit=9 [ 1010.710289][T18224] gfs2: error 10 reading superblock [ 1010.711743][T18224] gfs2: fsid=c: can't read superblock [ 1010.713218][T18224] gfs2: fsid=c: can't read superblock: -5 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x11}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18006000005b490080"], 0x26}}, 0x0) 00:16:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 84) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x25000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1010.775963][T18246] loop2: detected capacity change from 0 to 20 [ 1010.780231][T18246] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1010.785468][T18246] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1010.790022][T18246] kmem_cache_create_usercopy(f2fs_xattr_entry-7:2) failed with error -12 [ 1010.792095][T18246] CPU: 1 PID: 18246 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1010.794573][T18246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1010.797064][T18246] Call trace: [ 1010.797895][T18246] dump_backtrace+0x1b0/0x1dc [ 1010.799018][T18246] show_stack+0x2c/0x64 [ 1010.799971][T18246] dump_stack_lvl+0x104/0x16c [ 1010.801073][T18246] dump_stack+0x1c/0x58 [ 1010.802039][T18246] kmem_cache_create_usercopy+0x268/0x31c [ 1010.803365][T18246] kmem_cache_create+0x1c/0x28 [ 1010.804460][T18246] f2fs_init_xattr_caches+0x78/0xb4 [ 1010.805768][T18246] f2fs_fill_super+0x1050/0x1e0c [ 1010.806892][T18246] mount_bdev+0x1b8/0x210 [ 1010.807906][T18246] f2fs_mount+0x44/0x58 [ 1010.808886][T18246] legacy_get_tree+0x30/0x74 [ 1010.810024][T18246] vfs_get_tree+0x40/0x140 [ 1010.811092][T18246] do_new_mount+0x1dc/0x4e4 [ 1010.812190][T18246] path_mount+0x358/0x914 [ 1010.813216][T18246] __arm64_sys_mount+0x2f8/0x408 [ 1010.814358][T18246] el0_svc_common+0x138/0x220 [ 1010.815454][T18246] do_el0_svc+0x48/0x154 [ 1010.816481][T18246] el0_svc+0x58/0x150 [ 1010.817472][T18246] el0t_64_sync_handler+0x84/0xf0 [ 1010.818645][T18246] el0t_64_sync+0x18c/0x190 00:16:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1400, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x12}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000003005b490080"], 0x26}}, 0x0) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x58000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 85) 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000005005b490080"], 0x26}}, 0x0) [ 1010.883467][T18259] loop3: detected capacity change from 0 to 10 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x25}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.888128][T18259] Dev loop3: unable to read RDB block 10 [ 1010.892019][T18259] loop3: unable to read partition table [ 1010.894698][T18259] loop3: partition table beyond EOD, truncated [ 1010.896743][T18262] loop2: detected capacity change from 0 to 20 [ 1010.903095][T18259] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1010.905860][T18262] loop2: unable to read partition table 00:16:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000006005b490080"], 0x26}}, 0x0) [ 1010.908248][T18259] gfs2: fsid=c: Now mounting FS (format 0)... [ 1010.910010][T18262] loop2: partition table beyond EOD, truncated [ 1010.911813][T18259] syz-executor.3: attempt to access beyond end of device [ 1010.911813][T18259] loop3: rw=4096, sector=128, nr_sectors = 8 limit=10 [ 1010.915364][T18259] gfs2: error 10 reading superblock [ 1010.918655][T18259] gfs2: fsid=c: can't read superblock [ 1010.920185][T18259] gfs2: fsid=c: can't read superblock: -5 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1010.938960][T12789] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x48}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1500, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 86) 00:16:50 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x4c}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) [ 1011.003085][T18274] loop2: detected capacity change from 0 to 20 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000009005b490080"], 0x26}}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, 0x0}, 0x0) [ 1011.018709][T18274] loop2: unable to read partition table [ 1011.023678][T18274] loop2: partition table beyond EOD, truncated [ 1011.025334][T18274] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.026075][T18278] loop3: detected capacity change from 0 to 10 [ 1011.029352][T29066] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.031384][T29066] Buffer I/O error on dev loop3, logical block 0, async page read [ 1011.038911][T18274] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1011.053070][T29066] Dev loop3: unable to read RDB block 10 [ 1011.054445][T29066] loop3: unable to read partition table [ 1011.055645][T29066] loop3: partition table beyond EOD, truncated 00:16:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 87) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000a005b490080"], 0x26}}, 0x0) 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x68}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, 0x0}, 0x0) [ 1011.085034][T18289] loop2: detected capacity change from 0 to 20 [ 1011.095874][T18289] loop2: unable to read partition table [ 1011.102406][T18278] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1011.103175][T18289] loop2: partition table beyond EOD, [ 1011.104022][T18278] gfs2: fsid=c: Now mounting FS (format 0)... [ 1011.104240][T18278] syz-executor.3: attempt to access beyond end of device [ 1011.104240][T18278] loop3: rw=4096, sector=128, nr_sectors = 8 limit=10 [ 1011.110286][T18278] gfs2: error 10 reading superblock [ 1011.111404][T18278] gfs2: fsid=c: can't read superblock 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x6c}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1011.111912][T18289] truncated [ 1011.133265][T18278] gfs2: fsid=c: can't read superblock: -5 [ 1011.163602][T12789] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000c005b490080"], 0x26}}, 0x0) 00:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x78000000, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, 0x0}, 0x0) 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x74}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1600, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 88) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)}, 0x0) [ 1011.220240][T18306] loop2: detected capacity change from 0 to 20 [ 1011.222906][T18306] loop2: unable to read partition table [ 1011.224472][T18306] loop2: partition table beyond EOD, truncated [ 1011.228285][T18307] loop3: detected capacity change from 0 to 11 [ 1011.235035][T18307] Dev loop3: unable to read RDB block 11 [ 1011.239270][T18306] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.241035][T18306] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x7a}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800c00e005b490080"], 0x26}}, 0x0) [ 1011.247605][T18307] loop3: unable to read partition table [ 1011.249124][T18307] loop3: partition table beyond EOD, truncated [ 1011.251103][T18307] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1011.252827][T18307] gfs2: fsid=c: Now mounting FS (format 0)... [ 1011.276617][T18307] syz-executor.3: attempt to access beyond end of device [ 1011.276617][T18307] loop3: rw=4096, sector=128, nr_sectors = 8 limit=11 [ 1011.283775][T18307] gfs2: error 10 reading superblock [ 1011.285050][T18307] gfs2: fsid=c: can't read superblock 00:16:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 89) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800000f005b490080"], 0x26}}, 0x0) [ 1011.291748][T18307] gfs2: fsid=c: can't read superblock: -5 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)}, 0x0) 00:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xfc}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a1800560f005b490080"], 0x26}}, 0x0) [ 1011.351011][T18322] loop2: detected capacity change from 0 to 20 [ 1011.353184][T12789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.355224][T12789] Buffer I/O error on dev loop2, logical block 0, async page read [ 1011.365297][T12789] loop2: unable to read partition table [ 1011.368208][T12789] loop2: partition table beyond EOD, truncated [ 1011.370240][T18322] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.372213][T18322] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1011.374546][T18322] kmem_cache_create_usercopy(f2fs_xattr_entry-7:2) failed with error -12 [ 1011.380472][T18322] CPU: 1 PID: 18322 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1011.382961][T18322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1011.385372][T18322] Call trace: [ 1011.386124][T18322] dump_backtrace+0x1b0/0x1dc [ 1011.387291][T18322] show_stack+0x2c/0x64 [ 1011.388333][T18322] dump_stack_lvl+0x104/0x16c [ 1011.389471][T18322] dump_stack+0x1c/0x58 [ 1011.390525][T18322] kmem_cache_create_usercopy+0x268/0x31c [ 1011.391885][T18322] kmem_cache_create+0x1c/0x28 [ 1011.393058][T18322] f2fs_init_xattr_caches+0x78/0xb4 [ 1011.394289][T18322] f2fs_fill_super+0x1050/0x1e0c [ 1011.395497][T18322] mount_bdev+0x1b8/0x210 [ 1011.396569][T18322] f2fs_mount+0x44/0x58 [ 1011.397544][T18322] legacy_get_tree+0x30/0x74 [ 1011.398672][T18322] vfs_get_tree+0x40/0x140 [ 1011.399744][T18322] do_new_mount+0x1dc/0x4e4 [ 1011.400822][T18322] path_mount+0x358/0x914 [ 1011.401861][T18322] __arm64_sys_mount+0x2f8/0x408 [ 1011.403005][T18322] el0_svc_common+0x138/0x220 [ 1011.404126][T18322] do_el0_svc+0x48/0x154 [ 1011.405110][T18322] el0_svc+0x58/0x150 [ 1011.406020][T18322] el0t_64_sync_handler+0x84/0xf0 [ 1011.407193][T18322] el0t_64_sync+0x18c/0x190 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x300}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1700, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xefffffff, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18008847005b490080"], 0x26}}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)}, 0x0) [ 1011.465758][T18335] loop3: detected capacity change from 0 to 11 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18008848005b490080"], 0x26}}, 0x0) [ 1011.470541][ T2560] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.479374][ T2560] Buffer I/O error on dev loop3, logical block 0, async page read [ 1011.481500][ T2560] Buffer I/O error on dev loop3, logical block 0, async page read [ 1011.483602][ T2560] Buffer I/O error on dev loop3, logical block 0, async page read [ 1011.485558][ T2560] Buffer I/O error on dev loop3, logical block 0, async page read [ 1011.489949][ T2560] Buffer I/O error on dev loop3, logical block 0, async page read [ 1011.492357][ T2560] ldm_validate_partition_table(): Disk read failed. [ 1011.494486][ T2560] Dev loop3: unable to read RDB block 0 [ 1011.497012][ T2560] loop3: unable to read partition table [ 1011.498816][ T2560] loop3: partition table beyond EOD, truncated [ 1011.513828][T18335] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" 00:16:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 90) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000f56005b490080"], 0x26}}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x500}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1011.531849][T18335] gfs2: fsid=c: Now mounting FS (format 0)... 00:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) [ 1011.540102][T18335] syz-executor.3: attempt to access beyond end of device [ 1011.540102][T18335] loop3: rw=4096, sector=128, nr_sectors = 8 limit=11 [ 1011.543268][T18335] gfs2: error 10 reading superblock [ 1011.544469][T18335] gfs2: fsid=c: can't read superblock [ 1011.545729][T18335] gfs2: fsid=c: can't read superblock: -5 [ 1011.549524][T18344] loop2: detected capacity change from 0 to 20 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x600}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1011.559632][T12789] loop2: unable to read partition table [ 1011.561184][T12789] loop2: partition table beyond EOD, truncated [ 1011.564389][T18344] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.567607][T18344] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1011.576703][T18344] kmem_cache_create_usercopy(f2fs_xattr_entry-7:2) failed with error -12 [ 1011.578918][T18344] CPU: 1 PID: 18344 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1011.581363][T18344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1011.583759][T18344] Call trace: [ 1011.584637][T18344] dump_backtrace+0x1b0/0x1dc [ 1011.585786][T18344] show_stack+0x2c/0x64 [ 1011.586788][T18344] dump_stack_lvl+0x104/0x16c [ 1011.587930][T18344] dump_stack+0x1c/0x58 [ 1011.588942][T18344] kmem_cache_create_usercopy+0x268/0x31c [ 1011.590402][T18344] kmem_cache_create+0x1c/0x28 [ 1011.591552][T18344] f2fs_init_xattr_caches+0x78/0xb4 [ 1011.592861][T18344] f2fs_fill_super+0x1050/0x1e0c [ 1011.593990][T18344] mount_bdev+0x1b8/0x210 [ 1011.595019][T18344] f2fs_mount+0x44/0x58 [ 1011.595976][T18344] legacy_get_tree+0x30/0x74 [ 1011.597083][T18344] vfs_get_tree+0x40/0x140 [ 1011.598184][T18344] do_new_mount+0x1dc/0x4e4 [ 1011.599225][T18344] path_mount+0x358/0x914 [ 1011.600224][T18344] __arm64_sys_mount+0x2f8/0x408 [ 1011.601334][T18344] el0_svc_common+0x138/0x220 [ 1011.602421][T18344] do_el0_svc+0x48/0x154 [ 1011.603463][T18344] el0_svc+0x58/0x150 [ 1011.604373][T18344] el0t_64_sync_handler+0x84/0xf0 [ 1011.605502][T18344] el0t_64_sync+0x18c/0x190 00:16:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1c02, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x0) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18006558005b490080"], 0x26}}, 0x0) 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x700}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5ffffff, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 91) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000060005b490080"], 0x26}}, 0x0) 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0x900}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)}], 0x1}, 0x0) [ 1011.701939][T18360] loop3: detected capacity change from 0 to 14 [ 1011.720966][T12789] ldm_validate_partition_table(): Disk read failed. [ 1011.727061][T18367] loop2: detected capacity change from 0 to 20 [ 1011.731245][ T2560] ldm_validate_partition_table(): Disk read failed. [ 1011.739305][ T2560] loop2: unable to read partition table [ 1011.740783][ T2560] loop2: partition table beyond EOD, truncated [ 1011.742353][T18367] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18005865005b490080"], 0x26}}, 0x0) [ 1011.746561][T12789] Dev loop3: unable to read RDB block 14 [ 1011.748074][T18367] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xa00}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)}], 0x1}, 0x0) [ 1011.753449][T12789] loop3: unable to read partition table [ 1011.757531][T18367] kmem_cache_create_usercopy(f2fs_xattr_entry-7:2) failed with error -12 [ 1011.765280][T12789] loop3: partition table beyond EOD, truncated [ 1011.767312][T18367] CPU: 1 PID: 18367 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1011.769803][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1011.772173][T18367] Call trace: [ 1011.772954][T18367] dump_backtrace+0x1b0/0x1dc [ 1011.774116][T18367] show_stack+0x2c/0x64 [ 1011.775090][T18367] dump_stack_lvl+0x104/0x16c [ 1011.776210][T18367] dump_stack+0x1c/0x58 [ 1011.777198][T18367] kmem_cache_create_usercopy+0x268/0x31c [ 1011.778576][T18367] kmem_cache_create+0x1c/0x28 [ 1011.779660][T18367] f2fs_init_xattr_caches+0x78/0xb4 [ 1011.780853][T18367] f2fs_fill_super+0x1050/0x1e0c [ 1011.781949][T18367] mount_bdev+0x1b8/0x210 [ 1011.782982][T18367] f2fs_mount+0x44/0x58 [ 1011.783997][T18367] legacy_get_tree+0x30/0x74 [ 1011.785129][T18367] vfs_get_tree+0x40/0x140 [ 1011.786148][T18367] do_new_mount+0x1dc/0x4e4 [ 1011.787249][T18367] path_mount+0x358/0x914 [ 1011.788327][T18367] __arm64_sys_mount+0x2f8/0x408 [ 1011.789553][T18367] el0_svc_common+0x138/0x220 [ 1011.790686][T18367] do_el0_svc+0x48/0x154 [ 1011.791686][T18367] el0_svc+0x58/0x150 [ 1011.792640][T18367] el0t_64_sync_handler+0x84/0xf0 [ 1011.793790][T18367] el0t_64_sync+0x18c/0x190 [ 1011.810061][T18360] gfs2: fsid=c: Trying to join cluster "lock_nolock", "c" [ 1011.816398][T18360] gfs2: fsid=c: Now mounting FS (format 0)... [ 1011.819338][T18360] syz-executor.3: attempt to access beyond end of device [ 1011.819338][T18360] loop3: rw=4096, sector=128, nr_sectors = 8 limit=14 [ 1011.822428][T18360] gfs2: error 10 reading superblock [ 1011.823600][T18360] gfs2: fsid=c: can't read superblock [ 1011.824818][T18360] gfs2: fsid=c: can't read superblock: -5 00:16:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000500), &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1d02, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lockproto=lock_nolock,locktable=c']) 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)}], 0x1}, 0x0) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18000081005b490080"], 0x26}}, 0x0) 00:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfeffffff, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x8, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xb00}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) 00:16:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010360)="1020f5f201000e0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fastboot,disable_roll_forward,noinline_dentry']) (fail_nth: 92) [ 1011.899781][T18381] loop2: detected capacity change from 0 to 20 00:16:51 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9", 0x14}], 0x1}, 0x0) [ 1011.917555][T18381] loop2: unable to read partition table [ 1011.919132][T18381] loop2: partition table beyond EOD, truncated 00:16:51 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1, 0xc00}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="f96c3fc629872fe9bba046316a7addc09f86f9f9a03bf713651bc543118e31de285e34496a613655", 0x28}], 0x1}, 0x0) [ 1011.923357][T18387] loop3: detected capacity change from 0 to 14 [ 1011.926592][T18381] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:16:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001200010a18004788005b490080"], 0x26}}, 0x0) [ 1011.935996][T18381] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1011.939870][T18387] Dev loop3: unable to read RDB block 14 [ 1011.941780][T18387] loop3: unable to read partition table [ 1011.943214][T18387] loop3: partition table beyond EOD, truncated [ 1011.945030][T18381] ------------[ cut here ]------------ [ 1011.946376][T18381] kernel BUG at mm/slub.c:5893! [ 1011.947665][T18381] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP [ 1011.949135][T18381] Modules linked in: [ 1011.950049][T18381] CPU: 0 PID: 18381 Comm: syz-executor.2 Not tainted 6.0.0-rc2-syzkaller-16455-ga41a877bc12d #0 [ 1011.952516][T18381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1011.954937][T18381] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1011.956800][T18381] pc : sysfs_slab_add+0x258/0x260 [ 1011.958022][T18381] lr : sysfs_slab_add+0xa0/0x260 [ 1011.959187][T18381] sp : ffff800020bdb990 [ 1011.960205][T18381] x29: ffff800020bdb990 x28: ffff000118e61a80 x27: ffff0000c7097b00 [ 1011.962085][T18381] x26: 0000000000020000 x25: ffff80000eee7000 x24: ffff80000eef6000 [ 1011.964080][T18381] x23: 0000000000000000 x22: ffff0000c1be4b00 x21: 0000000000000008 [ 1011.965953][T18381] x20: ffff0000c7097b00 x19: ffff0000c7097b00 x18: 0000000000000000 [ 1011.967804][T18381] x17: 0000000000000000 x16: ffff80000dbb8658 x15: ffff00011486b500 [ 1011.969720][T18381] x14: 0000000000000010 x13: 0000000000000000 x12: 0000000000040000 [ 1011.971696][T18381] x11: 000000000000c7a3 x10: ffff80001852c000 x9 : 9bce9fe21fa7b300 [ 1011.973644][T18381] x8 : 9bce9fe21fa7b300 x7 : ffff8000084b7280 x6 : 0000000000000000 [ 1011.975546][T18381] x5 : 0000000000000cc0 x4 : 0000000000000080 x3 : 0000000000000040 [ 1011.977555][T18381] x2 : ffff0000c0001200 x1 : ffff80000cb90cf9 x0 : 0000000000000000 [ 1011.979481][T18381] Call trace: [ 1011.980234][T18381] sysfs_slab_add+0x258/0x260 [ 1011.981297][T18381] __kmem_cache_create+0x60/0x118 [ 1011.982481][T18381] kmem_cache_create_usercopy+0x19c/0x31c [ 1011.983824][T18381] kmem_cache_create+0x1c/0x28 [ 1011.984998][T18381] f2fs_init_xattr_caches+0x78/0xb4 [ 1011.986214][T18381] f2fs_fill_super+0x1050/0x1e0c [ 1011.987392][T18381] mount_bdev+0x1b8/0x210 [ 1011.988457][T18381] f2fs_mount+0x44/0x58 [ 1011.989530][T18381] legacy_get_tree+0x30/0x74 [ 1011.990643][T18381] vfs_get_tree+0x40/0x140 [ 1011.991750][T18381] do_new_mount+0x1dc/0x4e4 [ 1011.992845][T18381] path_mount+0x358/0x914 [ 1011.993890][T18381] __arm64_sys_mount+0x2f8/0x408 [ 1011.995108][T18381] el0_svc_common+0x138/0x220 [ 1011.996265][T18381] do_el0_svc+0x48/0x154 [ 1011.997249][T18381] el0_svc+0x58/0x150 [ 1011.998255][T18381] el0t_64_sync_handler+0x84/0xf0 [ 1011.999471][T18381] el0t_64_sync+0x18c/0x190 [ 1012.000554][T18381] Code: a9415ff8 a8c47bfd d50323bf d65f03c0 (d4210000) [ 1012.002218][T18381] ---[ end trace 0000000000000000 ]--- [ 1012.238175][T18381] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 1012.240194][T18381] SMP: stopping secondary CPUs [ 1012.241364][T18381] Kernel Offset: disabled [ 1012.242412][T18381] CPU features: 0x0000,0081c021,09805c80 [ 1012.243803][T18381] Memory Limit: none [ 1012.458046][T18381] Rebooting in 86400 seconds..