0000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f803", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xbf00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x2c}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1211.080127][T18363] __nla_validate_parse: 3 callbacks suppressed [ 1211.080146][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x6, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xbf01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1211.159596][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1211.674727][T18392] loop0: detected capacity change from 0 to 264192 [ 1211.745419][T18393] loop4: detected capacity change from 0 to 264192 [ 1212.778904][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f802", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc000, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f804", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f802", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x7, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x58}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x12}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc001, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f805", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1214.608256][T18414] loop0: detected capacity change from 0 to 264192 [ 1214.633310][T18415] loop4: detected capacity change from 0 to 264192 [ 1214.792399][T18429] loop1: detected capacity change from 0 to 264192 [ 1214.940737][T18431] loop4: detected capacity change from 0 to 264192 21:47:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb14f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc100, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1215.849959][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x66}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f807", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc101, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x8, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1216.488223][T18453] loop1: detected capacity change from 0 to 264192 [ 1216.607418][T18454] loop4: detected capacity change from 0 to 264192 21:47:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc200, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x12}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f80a", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x8700, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc201, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc300, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1217.862758][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x9, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1218.021510][T18477] loop4: detected capacity change from 0 to 264192 21:47:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x66}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc301, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1218.609526][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc400, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc401, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x2}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x12}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f80b", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xa, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc500, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1218.837032][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1218.968676][T18506] loop4: detected capacity change from 0 to 264192 21:47:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc501, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x66}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc600, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f810", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x4}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc601, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1219.739700][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f80b", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1219.924459][T18536] loop4: detected capacity change from 0 to 264192 21:47:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc700, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1220.609240][T18542] loop0: detected capacity change from 0 to 264192 21:47:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f814", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x5}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x66}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xa, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1221.320161][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc701, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1221.500315][T18562] loop4: detected capacity change from 0 to 264192 21:47:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc800, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1222.028539][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc801, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x6}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc900, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xe, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xc901, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f80a", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f83d", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x8600, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xca00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1222.354699][T18582] loop0: detected capacity change from 0 to 264192 [ 1222.387730][T18583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1223.176704][T18588] loop4: detected capacity change from 0 to 264192 21:47:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x900, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x7}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd26174000280010d024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xca01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f800", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xf, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1223.709704][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd26174000280010d024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f800", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcb00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1225.247312][T18609] loop1: detected capacity change from 0 to 264192 [ 1225.266178][T18608] loop4: detected capacity change from 0 to 264192 [ 1225.351254][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:47:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd26174000280010d024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f800", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f83d", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcb01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1226.818238][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1227.518298][T18635] loop4: detected capacity change from 0 to 264192 [ 1228.203212][T18635] FAT-fs (loop4): bogus number of FAT sectors [ 1228.209500][T18635] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f800", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1228.382973][T18645] loop0: detected capacity change from 0 to 264192 21:47:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcc00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x10, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcc01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1229.181686][T18658] loop4: detected capacity change from 0 to 264192 [ 1229.268596][T18658] FAT-fs (loop4): bogus number of FAT sectors [ 1229.274844][T18658] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd26174000280010c024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1229.559719][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x12}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x11, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcd00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f81f", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1229.942314][T18671] loop0: detected capacity change from 0 to 264192 21:47:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcd01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1230.529899][T18682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1230.659711][T18689] loop4: detected capacity change from 0 to 264192 21:47:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x28}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xce00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x11, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1232.018396][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xce01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x2c}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcf00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1232.190248][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x28}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xce00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcf01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1232.355480][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x58}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x2, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1232.519201][T18735] loop4: detected capacity change from 0 to 264192 21:47:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x8201, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd000, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xcf01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1233.199249][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd001, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x2}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x66}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x28}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x500, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x3, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd100, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1233.377963][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1233.397934][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1233.461764][T18763] loop4: detected capacity change from 0 to 264192 [ 1233.473039][T18763] FAT-fs (loop4): invalid media value (0xeb) [ 1233.479237][T18763] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd101, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x4, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1234.038405][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:47:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd200, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd201, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x3}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x2}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd100, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1234.206717][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd100, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x5, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd300, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1234.831661][T18792] loop0: detected capacity change from 0 to 264192 [ 1234.835121][T18793] loop4: detected capacity change from 0 to 264192 [ 1235.786251][T18792] FAT-fs (loop0): invalid media value (0xeb) [ 1235.792623][T18792] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1235.814575][T18793] FAT-fs (loop4): invalid media value (0x11) [ 1235.820652][T18793] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd26174000280010a024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800107024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x4}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd301, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1235.912592][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x6, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1236.056276][T18808] loop0: detected capacity change from 0 to 264192 [ 1236.727062][T18814] loop1: detected capacity change from 0 to 264192 21:47:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2={0xff, 0x2, '\x00', 0x0}, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1237.370675][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd26174000280010a024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1237.568905][T18822] loop4: detected capacity change from 0 to 264192 [ 1237.598582][T18822] FAT-fs (loop4): invalid media value (0x40) [ 1237.604731][T18822] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd400, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x5}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x7, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1237.986143][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.992497][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.000695][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1238.011875][ T3748] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:47:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd401, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1238.622380][T18847] loop1: detected capacity change from 0 to 264192 [ 1238.685262][T18848] loop4: detected capacity change from 0 to 264192 [ 1239.526524][T18848] FAT-fs (loop4): bogus number of FAT structure [ 1239.533045][T18848] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd500, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x6}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd501, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd26174000280010a024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1239.651934][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1239.711633][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1239.839362][T18865] loop4: detected capacity change from 0 to 264192 [ 1240.020619][T18867] loop1: detected capacity change from 0 to 264192 [ 1240.883380][T18865] FAT-fs (loop4): invalid media value (0x00) [ 1240.889546][T18865] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x7}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd600, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x6}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd301, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x8, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd601, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1241.249757][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1241.738816][T18883] loop4: detected capacity change from 0 to 264192 [ 1241.869687][T18884] loop1: detected capacity change from 0 to 264192 [ 1242.856085][T18883] FAT-fs (loop4): invalid media value (0x01) [ 1242.862367][T18883] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1242.887082][T18884] FAT-fs (loop1): invalid media value (0x00) [ 1242.893119][T18884] FAT-fs (loop1): Can't find a valid FAT filesystem 21:47:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x9}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x7}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x9, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd700, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1243.076679][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1243.141650][T18903] loop4: detected capacity change from 0 to 264192 [ 1243.301527][T18905] loop1: detected capacity change from 0 to 264192 [ 1244.266641][T18903] FAT-fs (loop4): invalid media value (0x02) [ 1244.272688][T18903] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1244.314737][T18905] FAT-fs (loop1): invalid media value (0x01) [ 1244.320821][T18905] FAT-fs (loop1): Can't find a valid FAT filesystem 21:47:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xa}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x9}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd701, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd301, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1245.095475][T18926] loop1: detected capacity change from 0 to 264192 [ 1245.105328][T18925] loop4: detected capacity change from 0 to 264192 21:47:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xc}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd800, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1245.924188][T18926] FAT-fs (loop1): invalid media value (0x02) [ 1245.930362][T18926] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1245.937593][T18925] FAT-fs (loop4): invalid media value (0x00) [ 1245.943608][T18925] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd801, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xa}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd900, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1246.094921][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1246.107462][ T3881] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1246.171827][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1246.645608][T18949] loop4: detected capacity change from 0 to 264192 [ 1247.134598][T18951] loop1: detected capacity change from 0 to 264192 [ 1247.335204][T18952] loop0: detected capacity change from 0 to 264192 [ 1247.988411][T18949] FAT-fs (loop4): invalid media value (0x61) [ 1247.994840][T18949] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1248.064616][T18951] FAT-fs (loop1): invalid media value (0x00) [ 1248.071046][T18951] FAT-fs (loop1): Can't find a valid FAT filesystem 21:47:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:47:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xd901, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x10, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:47:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1248.408051][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1248.483874][T18968] loop4: detected capacity change from 0 to 264192 [ 1248.495049][T18968] FAT-fs (loop4): invalid media value (0xd2) [ 1248.501194][T18968] FAT-fs (loop4): Can't find a valid FAT filesystem 21:47:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:47:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xda00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:47:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xb, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1249.068898][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1249.139234][T18979] loop0: detected capacity change from 0 to 264192 21:48:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xe}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xda01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x10, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdb00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1249.788326][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1249.920290][T18994] loop4: detected capacity change from 0 to 264192 [ 1250.021271][T18994] FAT-fs (loop4): bogus logical sector size 0 [ 1250.027561][T18994] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xf}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdb01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1251.204296][T19001] loop0: detected capacity change from 0 to 264192 21:48:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) [ 1251.391478][T19011] loop4: detected capacity change from 0 to 264192 [ 1251.402652][T19011] FAT-fs (loop4): invalid media value (0x73) [ 1251.409045][T19011] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1251.603136][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:48:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdc00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xc, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1251.991056][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:48:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x10, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdc01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1252.035112][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1252.206472][T19023] loop0: detected capacity change from 0 to 264192 21:48:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x10}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdd00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xe, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1252.724754][T19033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1252.830142][T19040] loop4: detected capacity change from 0 to 264192 21:48:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) [ 1252.954709][T19040] FAT-fs (loop4): bogus number of reserved sectors [ 1252.961412][T19040] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdd01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1253.444717][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x12}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x11}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1253.723873][T19050] loop0: detected capacity change from 0 to 264192 21:48:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x10}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xde00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xf, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1254.193952][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1254.795671][T19065] loop4: detected capacity change from 0 to 264192 [ 1254.865947][T19066] loop1: detected capacity change from 0 to 264192 [ 1255.594042][T19065] FAT-fs (loop4): bogus number of reserved sectors [ 1255.600679][T19065] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1255.625237][T19066] FAT-fs (loop1): bogus number of reserved sectors [ 1255.631800][T19066] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xde01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x89}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) 21:48:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x10, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x11}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x28}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1255.764370][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1255.846127][T19080] loop0: detected capacity change from 0 to 264192 21:48:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdf00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd8}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1256.387816][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1256.394826][T19081] loop4: detected capacity change from 0 to 264192 [ 1256.404963][T19081] FAT-fs (loop4): bogus number of reserved sectors [ 1256.411487][T19081] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1256.533725][T19090] loop1: detected capacity change from 0 to 264192 21:48:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xdf01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1256.649344][T19090] FAT-fs (loop1): bogus number of reserved sectors [ 1256.656011][T19090] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x11, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1257.187195][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1257.674640][T19106] loop4: detected capacity change from 0 to 264192 [ 1257.675127][T19105] loop0: detected capacity change from 0 to 264192 21:48:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd9}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd8}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1258.471615][T19106] FAT-fs (loop4): bogus number of reserved sectors [ 1258.478195][T19106] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2c}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe000, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xda}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x60, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1259.871552][T19122] loop1: detected capacity change from 0 to 264192 [ 1259.893824][T19121] loop4: detected capacity change from 0 to 264192 21:48:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe001, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1259.987944][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1260.446695][T19141] loop0: detected capacity change from 0 to 264192 [ 1260.948190][T19143] loop4: detected capacity change from 0 to 264192 [ 1261.175213][T19144] loop1: detected capacity change from 0 to 264192 21:48:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe100, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x119}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1261.956331][T19143] FAT-fs (loop4): bogus number of reserved sectors [ 1261.962958][T19143] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x89}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x58}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe101, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1262.163920][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1262.790007][T19167] loop4: detected capacity change from 0 to 264192 [ 1262.945299][T19166] loop1: detected capacity change from 0 to 264192 [ 1263.243099][T19168] loop0: detected capacity change from 0 to 264192 21:48:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2c}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x300}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1264.273237][T19166] FAT-fs (loop1): bogus number of reserved sectors [ 1264.273253][T19167] FAT-fs (loop4): bogus number of reserved sectors [ 1264.279902][T19166] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1264.293130][T19167] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe200, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe201, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x2, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1264.416391][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1265.015230][T19189] loop4: detected capacity change from 0 to 264192 21:48:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x66}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1265.895950][T19189] FAT-fs (loop4): bogus number of reserved sectors [ 1265.902574][T19189] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x500}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe300, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x300}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1266.046005][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1266.530549][T19205] loop0: detected capacity change from 0 to 264192 [ 1266.564059][T19206] loop4: detected capacity change from 0 to 264192 21:48:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe301, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1267.441127][T19206] FAT-fs (loop4): bogus number of reserved sectors [ 1267.447860][T19206] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x600}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe400, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe401, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1268.054374][T19222] loop4: detected capacity change from 0 to 264192 [ 1268.055072][T19221] loop1: detected capacity change from 0 to 264192 21:48:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x700}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1269.083549][T19222] FAT-fs (loop4): bogus number of reserved sectors [ 1269.090181][T19222] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1269.114560][T19221] FAT-fs (loop1): bogus number of reserved sectors [ 1269.121367][T19221] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x600}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x500}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x3, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1269.206207][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1269.209155][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1269.298521][T19238] loop0: detected capacity change from 0 to 264192 [ 1269.540733][T19233] loop1: detected capacity change from 0 to 264192 [ 1270.078543][T19246] loop4: detected capacity change from 0 to 264192 [ 1270.091128][T19246] FAT-fs (loop4): bogus number of reserved sectors [ 1270.097909][T19246] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe500, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x900}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1270.519263][T19233] FAT-fs (loop1): bogus number of reserved sectors 21:48:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe501, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1270.629246][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1270.649168][T19233] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1271.045714][T19263] loop0: detected capacity change from 0 to 264192 [ 1271.235554][T19264] loop4: detected capacity change from 0 to 264192 [ 1271.965288][T19264] FAT-fs (loop4): bogus number of reserved sectors [ 1271.971879][T19264] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x600}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xa00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe600, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1272.586526][T19278] loop0: detected capacity change from 0 to 264192 21:48:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x5, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe601, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xc00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x700}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe700, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1274.383144][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1274.827071][T19296] loop0: detected capacity change from 0 to 264192 [ 1274.865193][T19297] loop4: detected capacity change from 0 to 264192 [ 1275.794814][T19297] FAT-fs (loop4): bogus number of reserved sectors [ 1275.801632][T19297] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1275.881733][T19303] loop1: detected capacity change from 0 to 264192 21:48:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe701, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe800, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1277.024674][T19323] loop0: detected capacity change from 0 to 264192 [ 1277.061829][T19324] loop4: detected capacity change from 0 to 264192 21:48:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xe00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1277.868830][T19324] FAT-fs (loop4): bogus number of reserved sectors [ 1277.875546][T19324] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe801, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x7, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1277.916637][T19311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe80}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xf00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe900, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1279.353631][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1020}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xe901, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1281.805727][T19367] loop4: detected capacity change from 0 to 264192 21:48:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xf00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1100}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1282.593116][T19367] FAT-fs (loop4): bogus number of reserved sectors [ 1282.600607][T19367] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x8, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xea00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1283.285782][T19384] loop0: detected capacity change from 0 to 264192 [ 1283.295700][T19385] loop4: detected capacity change from 0 to 264192 [ 1283.315589][T19386] loop1: detected capacity change from 0 to 264192 [ 1284.098118][T19385] FAT-fs (loop4): bogus number of reserved sectors [ 1284.104719][T19385] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1284.113577][T19386] FAT-fs (loop1): bogus number of reserved sectors [ 1284.120181][T19386] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1200}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x11cb}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1100}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xea01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1284.171111][T19391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x9, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xeb00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1284.278567][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1284.820845][T19404] loop4: detected capacity change from 0 to 264192 [ 1284.866406][T19405] loop1: detected capacity change from 0 to 264192 21:48:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x11cc}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x11cb}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1285.886247][T19404] FAT-fs (loop4): bogus number of reserved sectors [ 1285.892849][T19404] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1285.897361][T19405] FAT-fs (loop1): bogus number of reserved sectors [ 1285.906184][T19405] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xa, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1286.484547][T19417] loop4: detected capacity change from 0 to 264192 [ 1286.626473][T19418] loop1: detected capacity change from 0 to 264192 21:48:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x11d7}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2800}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x11cc}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1287.664681][T19417] FAT-fs (loop4): bogus number of reserved sectors [ 1287.671282][T19417] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1287.696054][T19418] FAT-fs (loop1): bogus number of reserved sectors [ 1287.703076][T19418] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:38 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xeb01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1287.733544][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1288.045936][T19434] loop0: detected capacity change from 0 to 264192 21:48:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xb, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xec00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xec01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xec00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2c00}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1289.125550][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xed00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1901}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xed01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xc, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1289.275359][T19454] loop0: detected capacity change from 0 to 264192 21:48:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1289.373978][T19466] loop1: detected capacity change from 0 to 264192 [ 1289.444677][T19469] loop4: detected capacity change from 0 to 264192 [ 1289.523519][T19469] FAT-fs (loop4): bogus number of reserved sectors [ 1289.530449][T19469] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xee00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xe, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5800}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1289.982144][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1290.052490][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1290.075392][T19479] loop0: detected capacity change from 0 to 264192 21:48:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xee01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1f00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xef00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1290.280026][T19496] loop0: detected capacity change from 0 to 264192 [ 1290.286833][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1290.353372][T19499] loop4: detected capacity change from 0 to 264192 [ 1290.364177][T19499] FAT-fs (loop4): bogus number of reserved sectors [ 1290.371112][T19499] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xef01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf000, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6600}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x10, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x2000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1f00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf001, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1291.106562][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1291.195057][T19521] loop0: detected capacity change from 0 to 264192 [ 1291.231497][T19523] loop4: detected capacity change from 0 to 264192 [ 1291.241735][T19523] FAT-fs (loop4): bogus number of reserved sectors [ 1291.248532][T19523] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf100, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x11, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1291.844023][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1291.955323][T19536] loop1: detected capacity change from 0 to 264192 21:48:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x2010}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1292.096090][T19536] FAT-fs (loop1): bogus number of reserved sectors [ 1292.102769][T19536] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf101, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x60, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1292.712801][T19548] loop4: detected capacity change from 0 to 264192 [ 1292.770501][T19548] FAT-fs (loop4): bogus number of reserved sectors [ 1292.777276][T19548] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800e}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x2000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf200, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1293.305758][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1293.320278][T19551] loop0: detected capacity change from 0 to 264192 [ 1293.433322][T19562] loop1: detected capacity change from 0 to 264192 [ 1293.465208][T19562] FAT-fs (loop1): bogus number of reserved sectors [ 1293.472098][T19562] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf201, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x3e7f}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1294.144023][T19571] loop4: detected capacity change from 0 to 264192 [ 1294.297458][T19571] FAT-fs (loop4): bogus number of reserved sectors [ 1294.304186][T19571] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x10, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf300, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1294.392794][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x58, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1294.760976][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:48:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x300, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf301, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800e}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x3f00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf400, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1294.884087][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1294.913008][T19585] loop0: detected capacity change from 0 to 264192 21:48:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf401, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1295.088278][T19596] loop4: detected capacity change from 0 to 264192 [ 1295.099584][T19596] FAT-fs (loop4): bogus number of reserved sectors [ 1295.106499][T19596] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x500, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf500, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1295.760290][T19602] loop0: detected capacity change from 0 to 264192 21:48:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x4000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x3f00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf501, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1295.893155][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1296.461012][T19622] loop1: detected capacity change from 0 to 264192 [ 1296.495232][T19623] loop4: detected capacity change from 0 to 264192 21:48:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x3f00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1297.534930][T19622] FAT-fs (loop1): bogus number of reserved sectors [ 1297.541625][T19622] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1297.568465][T19623] FAT-fs (loop4): bogus number of reserved sectors [ 1297.575231][T19623] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x7f3e}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x600, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf600, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1297.655846][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1297.720002][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1298.252339][T19645] loop4: detected capacity change from 0 to 264192 [ 1298.362901][T19646] loop1: detected capacity change from 0 to 264192 21:48:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf601, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x8100}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1299.218628][T19645] FAT-fs (loop4): bogus number of reserved sectors [ 1299.225405][T19645] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1299.252461][T19646] FAT-fs (loop1): bogus number of reserved sectors [ 1299.259067][T19646] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x700, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1299.296369][T19653] loop0: detected capacity change from 0 to 264192 21:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf700, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1299.426680][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.433158][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 21:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf701, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1299.510289][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1299.526341][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:48:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf800, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1299.723798][T19671] loop4: detected capacity change from 0 to 264192 [ 1299.767118][T19671] FAT-fs (loop4): bogus number of reserved sectors [ 1299.773950][T19671] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf801, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x900, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x8900}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1300.439932][T19679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1300.457533][T19680] loop0: detected capacity change from 0 to 264192 21:48:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf900, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1300.616566][T19692] loop4: detected capacity change from 0 to 264192 [ 1300.628068][T19692] FAT-fs (loop4): bogus number of reserved sectors [ 1300.634921][T19692] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xf901, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xcb11}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xa00, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1301.502544][T19702] loop4: detected capacity change from 0 to 264192 21:48:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1301.655047][T19702] FAT-fs (loop4): bogus number of reserved sectors [ 1301.661731][T19702] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfa00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x3}}}}}}}}, 0x6a) [ 1302.081525][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xb00, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfa01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xcc11}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1302.230819][T19714] loop0: detected capacity change from 0 to 264192 [ 1302.277344][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1302.442544][T19727] loop4: detected capacity change from 0 to 264192 [ 1302.470324][T19727] FAT-fs (loop4): bogus number of reserved sectors [ 1302.477009][T19727] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfb00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xc00, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfb01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd711}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x4}}}}}}}}, 0x6a) [ 1303.169042][T19734] loop0: detected capacity change from 0 to 264192 21:48:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1303.326077][T19745] loop4: detected capacity change from 0 to 264192 [ 1303.359985][T19745] FAT-fs (loop4): bogus number of reserved sectors [ 1303.366684][T19745] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfc00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1303.911774][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1303.949571][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:48:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfc01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd800}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1304.102907][T19762] loop0: detected capacity change from 0 to 264192 21:48:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xe00, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1304.257833][T19767] loop4: detected capacity change from 0 to 264192 [ 1304.285917][T19767] FAT-fs (loop4): bogus number of reserved sectors [ 1304.292651][T19767] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfd00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfb01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2}}}}}}}}, 0x6a) 21:48:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1304.848072][T19770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf00, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd900}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xd800}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfd01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1304.990780][T19780] loop0: detected capacity change from 0 to 264192 [ 1305.615709][T19790] loop4: detected capacity change from 0 to 264192 [ 1305.656098][T19791] loop1: detected capacity change from 0 to 264192 [ 1306.379328][T19790] FAT-fs (loop4): bogus number of reserved sectors [ 1306.385995][T19790] FAT-fs (loop4): Can't find a valid FAT filesystem 21:48:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xda00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xcc11}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1306.424867][T19791] FAT-fs (loop1): bogus number of reserved sectors [ 1306.431436][T19791] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4}}}}}}}}, 0x6a) [ 1306.478427][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfe00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1307.106868][T19807] loop4: detected capacity change from 0 to 264192 [ 1307.145281][T19808] loop1: detected capacity change from 0 to 264192 21:48:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xedc0}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1308.009316][T19807] FAT-fs (loop4): bogus number of reserved sectors [ 1308.015926][T19807] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1308.039970][T19808] FAT-fs (loop1): bogus number of reserved sectors [ 1308.046566][T19808] FAT-fs (loop1): Can't find a valid FAT filesystem 21:48:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:48:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xda00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:48:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xfe01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:48:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5}}}}}}}}, 0x6a) [ 1308.701625][T19822] loop1: detected capacity change from 0 to 264192 [ 1308.715408][T19821] loop4: detected capacity change from 0 to 264192 21:49:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1309.615494][T19822] FAT-fs (loop1): bogus number of reserved sectors [ 1309.622383][T19822] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1309.647109][T19821] FAT-fs (loop4): bogus number of reserved sectors [ 1309.653771][T19821] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xff00}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xff00, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1309.728548][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1309.847780][T19838] loop1: detected capacity change from 0 to 264192 [ 1309.947600][T19841] loop0: detected capacity change from 0 to 264192 [ 1310.092750][T19839] loop4: detected capacity change from 0 to 264192 [ 1310.103248][T19839] FAT-fs (loop4): bogus number of reserved sectors [ 1310.110443][T19839] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x5865, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6}}}}}}}}, 0x6a) 21:49:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0xff01, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1310.436218][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xff0f}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1310.548526][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7}}}}}}}}, 0x6a) 21:49:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x7ffff, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6000, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xedc0}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1310.763076][T19863] loop4: detected capacity change from 0 to 264192 [ 1310.773803][T19863] FAT-fs (loop4): bogus number of reserved sectors [ 1310.780597][T19863] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1311.099270][T19866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x8}}}}}}}}, 0x6a) 21:49:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6558, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x2, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1311.426985][T19876] loop0: detected capacity change from 0 to 264192 21:49:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x407ff}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1311.825285][T19878] loop1: detected capacity change from 0 to 264192 [ 1311.852092][T19878] FAT-fs (loop1): bogus number of reserved sectors [ 1311.858809][T19878] FAT-fs (loop1): Can't find a valid FAT filesystem 21:49:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x7ffff, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1312.192433][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x3, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1312.254630][ T3748] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1312.332416][T19892] loop4: detected capacity change from 0 to 264192 [ 1312.455049][T19892] FAT-fs (loop4): bogus number of reserved sectors [ 1312.461913][T19892] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x12}}}}}}}}, 0x6a) 21:49:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x8100, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6558, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x40800}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1313.109398][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x7, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1313.257325][T19916] loop4: detected capacity change from 0 to 264192 [ 1313.273063][T19916] FAT-fs (loop4): bogus number of reserved sectors [ 1313.279907][T19916] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1313.520571][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1313.817533][ T3884] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x3, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x8, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf000, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x80400}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1313.938372][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1314.012884][T19929] loop0: detected capacity change from 0 to 264192 21:49:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x7, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x28}}}}}}}}, 0x6a) 21:49:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xffff, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1314.222496][T19935] loop4: detected capacity change from 0 to 264192 [ 1314.352190][T19935] FAT-fs (loop4): bogus number of reserved sectors [ 1314.358963][T19935] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0xe0000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0xb, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1315.029900][T19943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1315.062035][T19952] loop0: detected capacity change from 0 to 264192 [ 1315.110869][T19953] loop4: detected capacity change from 0 to 264192 [ 1315.134927][T19953] FAT-fs (loop4): bogus number of reserved sectors [ 1315.141547][T19953] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2c}}}}}}}}, 0x6a) 21:49:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x12}}}}}}}}, 0x6a) 21:49:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x12, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1315.778320][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x400000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x7ffff, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1315.999602][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1316.014068][T19972] loop4: detected capacity change from 0 to 264192 [ 1316.024749][T19972] FAT-fs (loop4): bogus number of reserved sectors [ 1316.031378][T19972] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1316.106497][T19973] loop0: detected capacity change from 0 to 264192 21:49:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x58}}}}}}}}, 0x6a) 21:49:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1000000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1316.688312][T19985] loop1: detected capacity change from 0 to 264192 [ 1316.716629][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x1a1184, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:07 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x66}}}}}}}}, 0x6a) 21:49:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1316.938986][T19998] loop0: detected capacity change from 0 to 264192 [ 1316.961474][T19999] loop4: detected capacity change from 0 to 264192 [ 1316.972063][T19999] FAT-fs (loop4): bogus number of reserved sectors [ 1316.978858][T19999] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0xff000000, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1317.543026][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1317.627127][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x1190000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x500}}}}}}}}, 0x6a) 21:49:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1317.787847][T20015] loop1: detected capacity change from 0 to 264192 [ 1318.226995][T20017] loop4: detected capacity change from 0 to 264192 21:49:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1318.273218][T20017] FAT-fs (loop4): bogus number of reserved sectors [ 1318.280001][T20017] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:09 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x600}}}}}}}}, 0x6a) [ 1318.438975][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x7ffff, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x2000000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1318.585006][T20028] loop0: detected capacity change from 0 to 264192 [ 1318.735624][T20035] loop4: detected capacity change from 0 to 264192 [ 1318.746780][T20035] FAT-fs (loop4): bogus number of reserved sectors [ 1318.753401][T20035] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1318.949068][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x700}}}}}}}}, 0x6a) 21:49:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xe80}}}}}}}}, 0x6a) [ 1319.401006][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x3000000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:10 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1319.481378][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:10 executing program 1: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1319.612282][T20060] loop4: detected capacity change from 0 to 264192 [ 1319.624113][T20060] FAT-fs (loop4): bogus number of reserved sectors [ 1319.630823][T20060] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x3, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1320.243948][T20072] loop0: detected capacity change from 0 to 264192 [ 1320.256616][T20073] loop1: detected capacity change from 0 to 264192 [ 1320.282710][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x4000000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x1200}}}}}}}}, 0x6a) [ 1320.508523][T20082] loop4: detected capacity change from 0 to 264192 [ 1320.520860][T20082] FAT-fs (loop4): bogus number of reserved sectors [ 1320.527613][T20082] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x5, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:11 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1321.127043][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x5000000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x6, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1321.343334][T20098] loop4: detected capacity change from 0 to 264192 [ 1321.353995][T20098] FAT-fs (loop4): bogus number of reserved sectors [ 1321.360598][T20098] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1321.430056][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2800}}}}}}}}, 0x6a) [ 1321.916390][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1321.931992][T20104] loop0: detected capacity change from 0 to 264192 21:49:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x6000000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x7, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1322.144425][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1322.247085][T20120] loop4: detected capacity change from 0 to 264192 [ 1322.390616][T20120] FAT-fs (loop4): bogus number of reserved sectors [ 1322.397409][T20120] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1322.451904][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:49:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2c00}}}}}}}}, 0x6a) 21:49:13 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x8, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1322.804594][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x7, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1322.873968][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17, 0x7000000}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4000}}}}}}}}, 0x6a) [ 1323.020004][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1323.029663][T20135] loop0: detected capacity change from 0 to 264192 21:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x1b, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1323.179715][T20144] loop4: detected capacity change from 0 to 264192 [ 1323.195314][T20144] FAT-fs (loop4): bogus number of reserved sectors [ 1323.201910][T20144] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5800}}}}}}}}, 0x6a) 21:49:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1323.784355][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:14 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x21, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6600}}}}}}}}, 0x6a) [ 1323.978775][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1324.097646][T20166] loop4: detected capacity change from 0 to 264192 [ 1324.111100][T20166] FAT-fs (loop4): bogus number of reserved sectors [ 1324.117916][T20166] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1324.202435][T20168] loop0: detected capacity change from 0 to 264192 21:49:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x11}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1324.659361][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:49:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x50, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1324.768726][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1325.415103][T20186] loop1: detected capacity change from 0 to 264192 [ 1325.415105][T20185] loop4: detected capacity change from 0 to 264192 [ 1326.298963][T20185] FAT-fs (loop4): bogus number of reserved sectors [ 1326.298996][T20186] FAT-fs (loop1): bogus number of reserved sectors [ 1326.305781][T20185] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1326.312118][T20186] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1326.445450][ T3881] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x800e}}}}}}}}, 0x6a) 21:49:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x21, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x300, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x60}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:17 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1326.841863][T20196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1326.943044][T20205] loop4: detected capacity change from 0 to 264192 21:49:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1327.000121][T20204] loop0: detected capacity change from 0 to 264192 [ 1327.030052][T20205] FAT-fs (loop4): bogus number of reserved sectors [ 1327.037251][T20205] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x500, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf0}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1327.631075][T20216] loop1: detected capacity change from 0 to 264192 [ 1327.639533][T20216] FAT-fs (loop1): bogus number of reserved sectors [ 1327.646413][T20216] FAT-fs (loop1): Can't find a valid FAT filesystem 21:49:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1328.122014][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1328.362099][T20225] loop4: detected capacity change from 0 to 264192 21:49:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x800e}}}}}}}}, 0x6a) [ 1328.477435][T20225] FAT-fs (loop4): bogus number of reserved sectors [ 1328.484139][T20225] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x300}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:19 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x2}}}}}}}}, 0x6a) 21:49:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x600, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1329.127117][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1329.170169][T20242] loop0: detected capacity change from 0 to 264192 [ 1329.256658][T20244] loop4: detected capacity change from 0 to 264192 [ 1329.289329][T20244] FAT-fs (loop4): bogus number of reserved sectors [ 1329.296293][T20244] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x700, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x500}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1329.954365][T20253] loop1: detected capacity change from 0 to 264192 [ 1329.966162][T20253] FAT-fs (loop1): bogus number of reserved sectors [ 1329.972824][T20253] FAT-fs (loop1): Can't find a valid FAT filesystem 21:49:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x4}}}}}}}}, 0x6a) 21:49:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x2}}}}}}}}, 0x6a) [ 1330.562311][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1330.573692][T12470] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1330.705008][T20265] loop4: detected capacity change from 0 to 264192 [ 1330.777027][T20265] FAT-fs (loop4): bogus number of reserved sectors [ 1330.783743][T20265] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x600}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1331.273403][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x1b00, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:22 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1331.363833][T20275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x2}}}}}}}}, 0x6a) 21:49:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x5}}}}}}}}, 0x6a) 21:49:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x1f00, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x700}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1331.583511][T20288] loop0: detected capacity change from 0 to 264192 [ 1331.656728][T20293] loop4: detected capacity change from 0 to 264192 [ 1331.667652][T20293] FAT-fs (loop4): bogus number of reserved sectors [ 1331.674305][T20293] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x6}}}}}}}}, 0x6a) [ 1332.254106][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1332.280329][T20299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x5000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x2}}}}}}}}, 0x6a) [ 1332.540981][T20310] loop4: detected capacity change from 0 to 264192 [ 1332.551812][T20310] FAT-fs (loop4): bogus number of reserved sectors [ 1332.558502][T20310] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x7}}}}}}}}, 0x6a) [ 1333.149260][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x60ff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1333.312978][T20327] loop0: detected capacity change from 0 to 264192 [ 1333.403133][T20331] loop4: detected capacity change from 0 to 264192 [ 1333.416287][T20331] FAT-fs (loop4): bogus number of reserved sectors [ 1333.423161][T20331] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x8}}}}}}}}, 0x6a) [ 1334.027999][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1334.100765][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:49:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xff00, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0xe}}}}}}}}, 0x6a) [ 1334.274075][T20348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1334.370679][T20353] loop4: detected capacity change from 0 to 264192 [ 1334.383521][T20353] FAT-fs (loop4): bogus number of reserved sectors [ 1334.390275][T20353] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1334.585974][T20356] loop0: detected capacity change from 0 to 264192 21:49:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x20000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1334.910024][T20360] loop1: detected capacity change from 0 to 264192 [ 1334.984398][T20364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x80000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x12}}}}}}}}, 0x6a) [ 1335.257980][T20377] loop4: detected capacity change from 0 to 264192 [ 1335.270290][T20377] FAT-fs (loop4): bogus number of reserved sectors [ 1335.277351][T20377] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1335.848850][T20375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xbf000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1336.054057][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1336.091173][T20389] loop0: detected capacity change from 0 to 264192 [ 1336.169150][T20397] loop4: detected capacity change from 0 to 264192 [ 1336.192581][T20397] FAT-fs (loop4): bogus number of reserved sectors [ 1336.199304][T20397] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x28}}}}}}}}, 0x6a) [ 1336.742044][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x80000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xff000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1100}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x2c}}}}}}}}, 0x6a) [ 1336.961581][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1337.059638][T20415] loop4: detected capacity change from 0 to 264192 [ 1337.143949][T20415] FAT-fs (loop4): bogus number of reserved sectors [ 1337.150663][T20415] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5865}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x500000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1100}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1337.735844][T20424] loop0: detected capacity change from 0 to 264192 21:49:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x58}}}}}}}}, 0x6a) [ 1337.800824][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:49:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1337.882438][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1337.953567][T20439] loop4: detected capacity change from 0 to 264192 [ 1337.961726][T20439] FAT-fs (loop4): bogus number of reserved sectors [ 1337.968425][T20439] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xf00b00, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6000}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xf00f00, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x66}}}}}}}}, 0x6a) 21:49:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xf0ff1f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1338.722648][T20460] loop0: detected capacity change from 0 to 264192 [ 1338.734704][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1338.854286][T20468] loop4: detected capacity change from 0 to 264192 [ 1338.961970][T20468] FAT-fs (loop4): bogus number of reserved sectors [ 1338.968672][T20468] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x1000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6558}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x500}}}}}}}}, 0x6a) 21:49:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1339.516787][T20478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8100}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1339.674392][T20494] loop0: detected capacity change from 0 to 264192 [ 1339.748616][T20499] loop4: detected capacity change from 0 to 264192 [ 1339.762434][T20499] FAT-fs (loop4): bogus number of reserved sectors [ 1339.769286][T20499] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x2000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:30 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:31 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1340.334433][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:31 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x3000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf000}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x600}}}}}}}}, 0x6a) [ 1340.493945][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1340.683986][T20526] loop4: detected capacity change from 0 to 264192 21:49:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x4000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1340.796243][T20530] loop0: detected capacity change from 0 to 264192 21:49:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x700}}}}}}}}, 0x6a) [ 1341.223856][T20524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1341.225453][T20526] FAT-fs (loop4): bogus number of reserved sectors [ 1341.234862][T20526] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x5000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1341.384806][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1341.590054][T20551] loop4: detected capacity change from 0 to 264192 [ 1341.606119][T20551] FAT-fs (loop4): bogus number of reserved sectors [ 1341.612889][T20551] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x6000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x800}}}}}}}}, 0x6a) 21:49:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1342.164648][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1342.251055][T20564] loop0: detected capacity change from 0 to 264192 21:49:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x7000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0xc00}}}}}}}}, 0x6a) 21:49:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1342.352725][T20567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1342.504114][T20580] loop4: detected capacity change from 0 to 264192 [ 1342.527195][T20580] FAT-fs (loop4): bogus number of reserved sectors [ 1342.533833][T20580] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0xe80}}}}}}}}, 0x6a) 21:49:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x1b000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1343.231509][T20591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1343.242911][T20593] loop0: detected capacity change from 0 to 264192 21:49:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1343.379793][T20604] loop4: detected capacity change from 0 to 264192 [ 1343.397988][T20604] FAT-fs (loop4): bogus number of reserved sectors [ 1343.404755][T20604] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1343.966597][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x1200}}}}}}}}, 0x6a) 21:49:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x1f000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1344.293987][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1344.394374][T20625] loop4: detected capacity change from 0 to 264192 [ 1344.410518][T20625] FAT-fs (loop4): bogus number of reserved sectors [ 1344.417301][T20625] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x1ffff000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1345.146858][T20638] loop0: detected capacity change from 0 to 264192 21:49:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x20000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1345.304122][T20648] loop4: detected capacity change from 0 to 264192 [ 1345.331465][T20648] FAT-fs (loop4): bogus number of reserved sectors [ 1345.338150][T20648] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x1800}}}}}}}}, 0x6a) [ 1345.869262][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x21000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:49:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1346.091727][T20663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1346.105678][T20669] loop0: detected capacity change from 0 to 264192 [ 1346.196001][T20672] loop4: detected capacity change from 0 to 264192 [ 1346.204209][T20672] FAT-fs (loop4): bogus number of reserved sectors [ 1346.211158][T20672] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1346.757904][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xff000000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 21:49:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1346.956703][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) [ 1347.072963][T20697] loop0: detected capacity change from 0 to 264192 21:49:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xff0fa000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1347.209407][T20699] loop4: detected capacity change from 0 to 264192 [ 1347.235768][T20699] FAT-fs (loop4): bogus number of reserved sectors [ 1347.242529][T20699] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x2}}}}}}}}, 0x6a) 21:49:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 21:49:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x0, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1347.946458][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1347.966932][T20717] loop0: detected capacity change from 0 to 264192 [ 1348.033453][T20721] loop4: detected capacity change from 0 to 264192 [ 1348.101425][T20721] FAT-fs (loop4): bogus number of reserved sectors [ 1348.108316][T20721] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:38 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xff600000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x4}}}}}}}}, 0x6a) 21:49:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x0, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x0, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xffffffff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1348.835406][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1348.982219][T20748] loop4: detected capacity change from 0 to 264192 [ 1348.993565][T20748] FAT-fs (loop4): bogus number of reserved sectors [ 1349.000257][T20748] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1349.009517][T20747] loop0: detected capacity change from 0 to 264192 21:49:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x5}}}}}}}}, 0x6a) 21:49:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1349.495928][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1349.623061][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x6}}}}}}}}, 0x6a) 21:49:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x3, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1349.808560][T20767] loop0: detected capacity change from 0 to 264192 [ 1349.823477][T20768] loop4: detected capacity change from 0 to 264192 [ 1349.835757][T20768] FAT-fs (loop4): bogus number of reserved sectors [ 1349.842406][T20768] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x4, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1350.392802][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x7}}}}}}}}, 0x6a) 21:49:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x5, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1350.433545][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}}) 21:49:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x6, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}}) 21:49:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1350.797425][T20802] loop4: detected capacity change from 0 to 264192 [ 1350.809667][T20802] FAT-fs (loop4): bogus number of reserved sectors [ 1350.816385][T20802] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1350.831861][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1351.086329][T20801] loop0: detected capacity change from 0 to 264192 21:49:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0xa00fff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}}) 21:49:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) 21:49:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x8, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1b, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1351.634314][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1351.662162][T20825] loop4: detected capacity change from 0 to 264192 21:49:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}}}}, 0x6a) 21:49:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1351.756073][T20825] FAT-fs (loop4): bogus number of reserved sectors [ 1351.762983][T20825] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x21, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1352.236846][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1b, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1352.340656][T20835] loop0: detected capacity change from 0 to 264192 21:49:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x6a) 21:49:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x50, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1352.444967][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1352.608232][T20855] loop4: detected capacity change from 0 to 264192 [ 1352.622115][T20855] FAT-fs (loop4): bogus number of reserved sectors [ 1352.629013][T20855] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x300, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1353.513091][T20860] loop1: detected capacity change from 0 to 264192 21:49:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1353.764267][T20860] FAT-fs (loop1): bogus number of reserved sectors [ 1353.770915][T20860] FAT-fs (loop1): Can't find a valid FAT filesystem 21:49:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x6a) [ 1353.958218][T20868] loop4: detected capacity change from 0 to 264192 [ 1353.969211][T20868] FAT-fs (loop4): bogus number of reserved sectors [ 1353.976014][T20868] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x500, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1354.579807][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1354.588282][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x600, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1354.728302][T20879] loop1: detected capacity change from 0 to 264192 [ 1354.739165][T20879] FAT-fs (loop1): bogus number of reserved sectors [ 1354.746135][T20879] FAT-fs (loop1): Can't find a valid FAT filesystem 21:49:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x700, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1354.829089][ T3884] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1355.378464][T20889] loop4: detected capacity change from 0 to 264192 [ 1355.401343][T20889] FAT-fs (loop4): bogus number of reserved sectors [ 1355.408311][T20889] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x6}}}}}}}}, 0x6a) 21:49:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x60}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x6a) [ 1355.887771][T20894] loop0: detected capacity change from 0 to 264192 21:49:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1b00, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1f00, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1356.101277][T20904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1356.171687][T20911] loop4: detected capacity change from 0 to 264192 [ 1356.235805][T20911] FAT-fs (loop4): bogus number of reserved sectors [ 1356.242456][T20911] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x5000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x60ff, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf0}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x60}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xff00, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x7}}}}}}}}, 0x6a) [ 1356.953886][T20927] loop0: detected capacity change from 0 to 264192 [ 1356.981993][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1357.041885][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:49:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x20000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1357.178078][T20935] loop4: detected capacity change from 0 to 264192 [ 1357.189349][T20935] FAT-fs (loop4): bogus number of reserved sectors [ 1357.196080][T20935] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x300}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x80000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xbf000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1357.782906][T20952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xff000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x500}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1358.462889][T20967] loop1: detected capacity change from 0 to 264192 [ 1358.515155][T20966] loop4: detected capacity change from 0 to 264192 [ 1359.447060][T20967] FAT-fs (loop1): bogus number of reserved sectors [ 1359.453643][T20967] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1359.478371][T20966] FAT-fs (loop4): bogus number of reserved sectors [ 1359.484944][T20966] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x700, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x6a) 21:49:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x500000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1359.530467][T20970] loop0: detected capacity change from 0 to 264192 [ 1359.572021][ T3884] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1359.587230][T20974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xa00fff, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1359.755513][T20989] loop4: detected capacity change from 0 to 264192 [ 1359.786083][T20989] FAT-fs (loop4): bogus number of reserved sectors [ 1359.792993][T20989] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x600}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1360.459613][T20998] loop1: detected capacity change from 0 to 264192 [ 1360.564769][T20998] FAT-fs (loop1): bogus number of reserved sectors [ 1360.571351][T20998] FAT-fs (loop1): Can't find a valid FAT filesystem 21:49:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xf00b00, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x12}}}}}}}}, 0x6a) [ 1361.045578][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.053132][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.066568][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xf00f00, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1361.330805][T21009] loop4: detected capacity change from 0 to 264192 [ 1361.376248][T21009] FAT-fs (loop4): bogus number of reserved sectors [ 1361.382909][T21009] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xf0ff1f, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x700}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1361.834680][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1361.861890][T21020] loop0: detected capacity change from 0 to 264192 [ 1361.925086][T21023] loop1: detected capacity change from 0 to 264192 21:49:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1362.119750][T21023] FAT-fs (loop1): bogus number of reserved sectors [ 1362.126518][T21023] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1362.307545][T21026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x28}}}}}}}}, 0x6a) 21:49:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xf0ff1f, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1362.720604][T21038] loop4: detected capacity change from 0 to 264192 [ 1362.730358][T21038] FAT-fs (loop4): bogus number of reserved sectors [ 1362.737032][T21038] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x900}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x2000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1363.330285][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:49:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x3000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1363.446229][T21049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1363.606186][T21059] loop4: detected capacity change from 0 to 264192 [ 1363.617218][T21059] FAT-fs (loop4): bogus number of reserved sectors [ 1363.623918][T21059] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1363.913411][T21064] loop0: detected capacity change from 0 to 264192 21:49:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x4000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2c}}}}}}}}, 0x6a) [ 1364.198022][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1364.238383][T21067] loop1: detected capacity change from 0 to 264192 21:49:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1364.308587][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x5000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1364.480205][T21078] loop4: detected capacity change from 0 to 264192 [ 1364.558311][T21078] FAT-fs (loop4): bogus number of reserved sectors [ 1364.565107][T21078] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x6000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x58}}}}}}}}, 0x6a) [ 1365.080983][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1365.109576][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x7000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1b000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1365.331265][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1365.360007][T21102] loop0: detected capacity change from 0 to 264192 [ 1365.862068][T21106] loop1: detected capacity change from 0 to 264192 [ 1365.875111][T21105] loop4: detected capacity change from 0 to 264192 [ 1366.640642][T21106] FAT-fs (loop1): bogus number of reserved sectors [ 1366.647241][T21106] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1366.672544][T21105] FAT-fs (loop4): bogus number of reserved sectors [ 1366.679604][T21105] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x3000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x66}}}}}}}}, 0x6a) 21:49:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1f000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1367.525531][T21125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x3000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1ffff000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x20000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x1f000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1367.728072][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1367.776359][T21140] loop0: detected capacity change from 0 to 264192 [ 1367.830550][T21144] loop4: detected capacity change from 0 to 264192 [ 1367.897534][T21144] FAT-fs (loop4): bogus number of reserved sectors [ 1367.904174][T21144] FAT-fs (loop4): Can't find a valid FAT filesystem 21:49:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x21000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x500}}}}}}}}, 0x6a) 21:49:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1100}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf00}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xff000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1368.467070][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1368.505767][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xff0fa000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:49:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:49:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5865}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:49:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xff600000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1368.694903][T21172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1369.164620][T21176] loop4: detected capacity change from 0 to 264192 [ 1369.195085][T21177] loop1: detected capacity change from 0 to 264192 21:50:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1370.211260][T21176] FAT-fs (loop4): bogus number of reserved sectors [ 1370.217896][T21176] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1370.243472][T21177] FAT-fs (loop1): bogus number of reserved sectors [ 1370.250416][T21177] FAT-fs (loop1): Can't find a valid FAT filesystem 21:50:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1370.439458][T21192] loop1: detected capacity change from 0 to 264192 [ 1370.464876][T21193] loop4: detected capacity change from 0 to 264192 [ 1370.478610][T21193] FAT-fs (loop4): bogus number of reserved sectors 21:50:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6000}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x600}}}}}}}}, 0x6a) [ 1370.485568][T21193] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1371.077516][T21202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6558}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x700}}}}}}}}, 0x6a) 21:50:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1371.236298][T21210] loop0: detected capacity change from 0 to 264192 [ 1371.260264][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1371.554218][T21219] loop4: detected capacity change from 0 to 264192 [ 1371.564196][T21219] FAT-fs (loop4): bogus number of reserved sectors [ 1371.570965][T21219] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8100}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1372.223259][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1372.293951][T21238] loop4: detected capacity change from 0 to 264192 [ 1372.394540][T21238] FAT-fs (loop4): bogus number of reserved sectors [ 1372.401123][T21238] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0xe80}}}}}}}}, 0x6a) 21:50:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1372.877650][ T3748] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1372.993782][T21249] loop0: detected capacity change from 0 to 264192 21:50:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf000}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8100}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1373.246316][T21260] loop4: detected capacity change from 0 to 264192 [ 1373.320748][T21257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1373.423442][T21260] FAT-fs (loop4): bogus number of reserved sectors [ 1373.430339][T21260] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1200}}}}}}}}, 0x6a) 21:50:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1373.802548][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1373.816500][T21266] loop0: detected capacity change from 0 to 264192 [ 1373.835629][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:50:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1374.057355][T21278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1374.102405][T21287] loop0: detected capacity change from 0 to 264192 [ 1374.191455][T21290] loop4: detected capacity change from 0 to 264192 [ 1374.206879][T21290] FAT-fs (loop4): bogus number of reserved sectors [ 1374.213584][T21290] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1374.835053][T21298] loop0: detected capacity change from 0 to 264192 21:50:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2800}}}}}}}}, 0x6a) 21:50:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1374.998409][T21304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1375.067574][T21312] loop0: detected capacity change from 0 to 264192 [ 1375.095161][T21313] loop4: detected capacity change from 0 to 264192 [ 1375.107559][T21313] FAT-fs (loop4): bogus number of reserved sectors [ 1375.114541][T21313] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x21, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2c00}}}}}}}}, 0x6a) [ 1375.843754][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1375.964927][T21331] loop4: detected capacity change from 0 to 264192 [ 1375.975796][T21331] FAT-fs (loop4): bogus number of reserved sectors [ 1375.982397][T21331] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1376.563110][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x50, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1376.611102][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:50:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x4000}}}}}}}}, 0x6a) 21:50:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1376.656190][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2c00}}}}}}}}, 0x6a) [ 1376.888581][T21353] loop4: detected capacity change from 0 to 264192 [ 1376.900712][T21353] FAT-fs (loop4): bogus number of reserved sectors [ 1376.907499][T21353] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1377.497034][T21360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1377.568009][T21364] loop0: detected capacity change from 0 to 264192 21:50:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1377.741138][T21375] loop4: detected capacity change from 0 to 264192 [ 1377.869574][T21375] FAT-fs (loop4): bogus number of reserved sectors [ 1377.876359][T21375] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5800}}}}}}}}, 0x6a) [ 1378.422791][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1379.038429][T21398] loop4: detected capacity change from 0 to 264192 [ 1379.174866][T21399] loop1: detected capacity change from 0 to 264192 21:50:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1379.964135][T21399] FAT-fs (loop1): bogus number of reserved sectors [ 1379.970858][T21399] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1379.983566][T21398] FAT-fs (loop4): bogus number of reserved sectors [ 1379.990462][T21398] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x6600}}}}}}}}, 0x6a) 21:50:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1380.280686][T21406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1380.312214][T21409] loop0: detected capacity change from 0 to 264192 21:50:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1380.487712][T21419] loop1: detected capacity change from 0 to 264192 [ 1380.509447][T21419] FAT-fs (loop1): bogus number of reserved sectors [ 1380.516147][T21419] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1381.086628][T21423] loop4: detected capacity change from 0 to 264192 [ 1381.895790][T21423] FAT-fs (loop4): bogus number of reserved sectors [ 1381.902565][T21423] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x1b00, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1382.019922][ T3884] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x800e}}}}}}}}, 0x6a) [ 1382.201692][T21438] loop1: detected capacity change from 0 to 264192 [ 1382.212427][T21438] FAT-fs (loop1): bogus number of reserved sectors [ 1382.219139][T21438] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1382.946261][T21443] loop4: detected capacity change from 0 to 264192 21:50:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x6600}}}}}}}}, 0x6a) [ 1383.614706][T21443] FAT-fs (loop4): bogus number of reserved sectors [ 1383.621579][T21443] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1383.656244][T21446] loop0: detected capacity change from 0 to 264192 21:50:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1383.738601][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1383.922008][T21462] loop4: detected capacity change from 0 to 264192 [ 1383.932974][T21462] FAT-fs (loop4): bogus number of reserved sectors [ 1383.939859][T21462] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1384.535051][T21464] loop0: detected capacity change from 0 to 264192 21:50:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2c00}}}}}}}}, 0x6a) 21:50:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1384.621530][T21468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1384.684315][T21473] loop0: detected capacity change from 0 to 264192 21:50:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x6a) [ 1384.844314][T21481] loop4: detected capacity change from 0 to 264192 [ 1384.868568][T21481] FAT-fs (loop4): bogus number of reserved sectors [ 1384.875471][T21481] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1385.279030][T21485] loop0: detected capacity change from 0 to 264192 21:50:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x9}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}, 0x6a) [ 1385.527195][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1385.644643][T21496] loop1: detected capacity change from 0 to 264192 21:50:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1385.791475][T21496] FAT-fs (loop1): bogus number of reserved sectors [ 1385.798420][T21496] FAT-fs (loop1): Can't find a valid FAT filesystem 21:50:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1386.427291][T21508] loop0: detected capacity change from 0 to 264192 [ 1386.456369][T21509] loop4: detected capacity change from 0 to 264192 [ 1386.477643][T21509] FAT-fs (loop4): bogus number of reserved sectors [ 1386.484594][T21509] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x9}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x6a) [ 1387.076983][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1387.150695][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1387.359258][T21526] loop4: detected capacity change from 0 to 264192 21:50:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1387.441383][T21526] FAT-fs (loop4): bogus number of reserved sectors [ 1387.448158][T21526] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xb}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1387.795230][T21529] loop0: detected capacity change from 0 to 264192 21:50:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x6a) [ 1387.945910][ T3884] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1387.964103][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1388.028982][T21538] loop1: detected capacity change from 0 to 264192 21:50:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xc}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1388.215194][T21544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1388.399282][T21547] loop4: detected capacity change from 0 to 264192 [ 1388.412934][T21547] FAT-fs (loop4): bogus number of reserved sectors [ 1388.419691][T21547] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x6a) 21:50:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0xbf000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1389.035889][T21555] loop0: detected capacity change from 0 to 264192 [ 1389.109244][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1389.120173][T21564] loop1: detected capacity change from 0 to 264192 [ 1389.251185][T21567] loop4: detected capacity change from 0 to 264192 [ 1389.278830][T21567] FAT-fs (loop4): bogus number of reserved sectors [ 1389.285655][T21567] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0xff000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1389.827403][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}, 0x6a) [ 1390.019125][T21577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1390.051905][T21580] loop0: detected capacity change from 0 to 264192 [ 1390.131125][T21588] loop1: detected capacity change from 0 to 264192 [ 1390.158564][T21590] loop4: detected capacity change from 0 to 264192 [ 1390.194543][T21590] FAT-fs (loop4): bogus number of reserved sectors [ 1390.201230][T21590] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1390.767220][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x10}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0xa00fff, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x6a) [ 1390.990579][T21603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1391.463633][T21611] loop1: detected capacity change from 0 to 264192 [ 1391.496782][T21610] loop0: detected capacity change from 0 to 264192 [ 1391.509535][T21612] loop4: detected capacity change from 0 to 264192 21:50:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1392.355072][T21611] FAT-fs (loop1): bogus number of reserved sectors [ 1392.361917][T21611] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1392.370820][T21612] FAT-fs (loop4): bogus number of reserved sectors [ 1392.377464][T21612] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}], 0x3, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x11}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0xf00b00, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1394.202858][T21632] loop0: detected capacity change from 0 to 264192 [ 1394.266706][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1394.355025][T21641] loop1: detected capacity change from 0 to 264192 [ 1394.905195][T21644] loop4: detected capacity change from 0 to 264192 21:50:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x12}}}}}}}}, 0x6a) 21:50:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}], 0x3, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1395.935225][T21641] FAT-fs (loop1): bogus number of reserved sectors [ 1395.941803][T21641] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1395.974671][T21644] FAT-fs (loop4): bogus number of reserved sectors 21:50:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x6a) [ 1395.981239][T21644] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x60}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0xf00f00, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1396.210073][T21660] loop0: detected capacity change from 0 to 264192 [ 1396.275115][T21663] loop4: detected capacity change from 0 to 264192 [ 1396.283400][T21663] FAT-fs (loop4): bogus number of reserved sectors [ 1396.290161][T21663] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0xf0ff1f, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x28}}}}}}}}, 0x6a) 21:50:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1396.573489][T21658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf0}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1396.705909][T21675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1396.764593][T21677] loop1: detected capacity change from 0 to 264192 [ 1396.814817][T21677] FAT-fs (loop1): bogus number of reserved sectors [ 1396.821634][T21677] FAT-fs (loop1): Can't find a valid FAT filesystem 21:50:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}], 0x3, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2c}}}}}}}}, 0x6a) 21:50:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x300}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf0}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1397.459959][T21687] loop0: detected capacity change from 0 to 264192 [ 1397.619583][T21697] loop4: detected capacity change from 0 to 264192 [ 1397.630403][T21697] FAT-fs (loop4): bogus number of reserved sectors [ 1397.637310][T21697] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1397.671226][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58}}}}}}}}, 0x6a) 21:50:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1398.242439][T21694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:50:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x500}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x300}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1398.375474][T21707] loop0: detected capacity change from 0 to 264192 21:50:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x66}}}}}}}}, 0x6a) [ 1398.456898][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1398.516749][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1398.593954][T21720] loop4: detected capacity change from 0 to 264192 [ 1398.626213][T21720] FAT-fs (loop4): bogus number of reserved sectors [ 1398.632907][T21720] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1399.166200][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58}}}}}}}}, 0x6a) 21:50:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x600}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500}}}}}}}}, 0x6a) [ 1399.422982][T21737] loop0: detected capacity change from 0 to 264192 [ 1399.467569][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1399.522939][T21739] loop4: detected capacity change from 0 to 264192 [ 1399.559387][T21739] FAT-fs (loop4): bogus number of reserved sectors [ 1399.566195][T21739] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x66}}}}}}}}, 0x6a) 21:50:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x700}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x600}}}}}}}}, 0x6a) 21:50:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x600}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1400.307368][T21751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1400.372064][T21761] loop0: detected capacity change from 0 to 264192 [ 1400.429379][T21764] loop4: detected capacity change from 0 to 264192 [ 1400.440391][T21764] FAT-fs (loop4): bogus number of reserved sectors [ 1400.447136][T21764] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x900}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1400.991126][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1401.038592][T21771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1401.107777][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x3, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa00}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1401.339706][T21786] loop4: detected capacity change from 0 to 264192 [ 1401.352335][T21786] FAT-fs (loop4): bogus number of reserved sectors [ 1401.359186][T21786] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1401.634748][T21784] loop0: detected capacity change from 0 to 264192 [ 1401.968137][T21791] loop1: detected capacity change from 0 to 264192 [ 1401.978700][T21791] FAT-fs (loop1): bogus number of reserved sectors [ 1401.985458][T21791] FAT-fs (loop1): Can't find a valid FAT filesystem 21:50:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x700}}}}}}}}, 0x6a) 21:50:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x3, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x600}}}}}}}}, 0x6a) [ 1402.520272][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1402.632046][T21804] loop0: detected capacity change from 0 to 264192 [ 1402.718509][T21809] loop4: detected capacity change from 0 to 264192 [ 1402.729780][T21809] FAT-fs (loop4): bogus number of reserved sectors [ 1402.736611][T21809] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xb00}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1403.290536][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x3, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1403.380562][T21815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe80}}}}}}}}, 0x6a) 21:50:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x1b000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xc00}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1403.661825][T21828] loop4: detected capacity change from 0 to 264192 [ 1403.752846][T21828] FAT-fs (loop4): bogus number of reserved sectors [ 1403.759589][T21828] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1404.319361][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1200}}}}}}}}, 0x6a) 21:50:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe00}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1404.456871][T21840] loop0: detected capacity change from 0 to 264192 [ 1404.563354][T21845] loop4: detected capacity change from 0 to 264192 [ 1404.578651][T21845] FAT-fs (loop4): bogus number of reserved sectors [ 1404.585377][T21845] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xc00}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2800}}}}}}}}, 0x6a) 21:50:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1405.182790][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x1ffff000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) [ 1405.312155][T21863] loop0: detected capacity change from 0 to 264192 [ 1405.328540][T21851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1405.433343][T21869] loop4: detected capacity change from 0 to 264192 [ 1405.470132][T21869] FAT-fs (loop4): bogus number of reserved sectors [ 1405.477367][T21869] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf00}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) 21:50:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) 21:50:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/74, 0x4a}], 0x1, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) 21:50:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2c00}}}}}}}}, 0x6a) 21:50:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "ab6035", 0x30, 0x2f, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x8}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2800}}}}}}}}, 0x6a) [ 1406.181853][T21877] loop0: detected capacity change from 0 to 264192 [ 1406.216807][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1406.288495][T21880] loop4: detected capacity change from 0 to 264192 [ 1406.312293][T21880] FAT-fs (loop4): bogus number of reserved sectors [ 1406.319096][T21880] FAT-fs (loop4): Can't find a valid FAT filesystem 21:50:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x1100}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x11}, {0x4}}]}}]}, 0x3c}}, 0x0) [ 1406.856796][ T3881] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 21:50:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)=""/54, 0x36}}, {{&(0x7f0000000700)=@x25, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b00)=""/184, 0xb8}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/87, 0x57}}], 0x4, 0x12001, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x8100000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800106024011eb04f801", 0x17}], 0x0, &(0x7f0000000180), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbb60581e915f3c954789d13bfb545cbbc504388a10b91b90533f17791acb24b12eb4a13a4fc64053cd8a5f06b8deefc7f351b5e50847fdbc8456b3dea6ed7b89f9ff36244cec262a6594c13b793ba9f586e5bcb24462d8adf2e35ab65d92aab2375a3661d14bb40de84b1"], 0xb6, 0x0) [ 1406.992563][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:50:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10003, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0, "001000"}, 0x0, 0x2, {0x0}, 0xff000000}) panic: bad group arg size 24, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[]prog.Arg{}} type "array" goroutine 35 [running]: github.com/google/syzkaller/prog.foreachArgImpl({0x8b44d8, 0xc020305480}, 0xc010bb0e00, 0xc01eaf5d00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5d9 github.com/google/syzkaller/prog.foreachArgImpl({0x8b4518, 0xc0169424b0}, 0xc010bb0e00, 0xc01eaf5d00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x337 github.com/google/syzkaller/prog.ForeachArg(0xc00e93b180, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x105 github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc026322f40, 0xb, 0xc015b88570, 0xc01eaf5d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xaa main.(*Proc).executeHintSeed(0xc026322f40, 0x3d0, 0xb) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xd2 main.(*Proc).smashInput(0xc026322f40, 0xc009d20d80) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x88 main.(*Proc).loop(0xc026322f40) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x125 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:310 +0x15e5 [ 1407.891638][T11684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.996685][T11684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.108685][T11684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.236798][T11684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.984039][T11684] device hsr_slave_0 left promiscuous mode [ 1408.991062][T11684] device hsr_slave_1 left promiscuous mode [ 1409.003827][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.011984][T11684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.029041][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.040498][T11684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.051425][T11684] device bridge_slave_1 left promiscuous mode [ 1409.062925][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.083781][T11684] device bridge_slave_0 left promiscuous mode [ 1409.092768][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.138789][T11684] device veth1_macvtap left promiscuous mode [ 1409.145564][T11684] device veth0_macvtap left promiscuous mode [ 1409.152996][T11684] device veth1_vlan left promiscuous mode [ 1409.165430][T11684] device veth0_vlan left promiscuous mode