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"}, 0x1019) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x0, 0x5, 0x63}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '*'}, {0x20, '\\,#-'}, {0x20, '\x00'}, {0x20, '--%!'}], 0xa, "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"}, 0x1019) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x0, 0x5, 0x63}) (async) 03:42:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)=""/81, 0x51}, 0x4}], 0x1, 0x240, &(0x7f0000000200)) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x91) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) 03:42:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x81, 0x0, 0x1000}) 03:42:00 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x20000}, 0x0) 03:42:00 executing program 0: syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x101, 0x3, 0x101, 0x10, 0x20}) 03:42:00 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x0) [ 721.153527][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x81, 0x0, 0x1000}) [ 721.208482][T22067] loop1: detected capacity change from 0 to 264192 03:42:00 executing program 0: syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x101, 0x3, 0x101, 0x10, 0x20}) 03:42:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x142800}, 0x0) 03:42:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)=""/81, 0x51}, 0x4}], 0x1, 0x240, &(0x7f0000000200)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x91) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)=""/81, 0x51}, 0x4}], 0x1, 0x240, &(0x7f0000000200)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x91) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) (async) [ 721.256771][T22067] squashfs image failed sanity check 03:42:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x81, 0x0, 0x1000}) 03:42:00 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x281400}, 0x0) 03:42:00 executing program 2: syz_io_uring_setup(0x4235, &(0x7f00000000c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="5800009a692fc70000000000000000009b3d2fffa24a7bedb6a15f910fac8fde5715efee32f9b08fb0d9a0177ebfc4de2ce308aa99844e2317636421ca82deb97a2061420b4588b9f598780000000000000000000000000064f72f832998d935b544fbff72bb13eedd87c94e7ab35e6da1382e3061f390a28187420799ca44220edccd4ddf59726d35cacb1ff3c3e63a768f8f6c312902e51e"], 0x58}, 0x0, 0x804}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}, 0xadad) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x40, 0x0, 0x0, 0xa}) [ 721.394971][T22099] loop1: detected capacity change from 0 to 264192 [ 721.417165][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:42:01 executing program 0: syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x101, 0x3, 0x101, 0x10, 0x20}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x101, 0x3, 0x101, 0x10, 0x20}) (async) 03:42:01 executing program 2: syz_io_uring_setup(0x4235, &(0x7f00000000c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async, rerun: 64) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) (rerun: 64) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="5800009a692fc70000000000000000009b3d2fffa24a7bedb6a15f910fac8fde5715efee32f9b08fb0d9a0177ebfc4de2ce308aa99844e2317636421ca82deb97a2061420b4588b9f598780000000000000000000000000064f72f832998d935b544fbff72bb13eedd87c94e7ab35e6da1382e3061f390a28187420799ca44220edccd4ddf59726d35cacb1ff3c3e63a768f8f6c312902e51e"], 0x58}, 0x0, 0x804}, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}, 0xadad) (rerun: 32) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x40, 0x0, 0x0, 0xa}) 03:42:01 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x400000}, 0x0) [ 721.449089][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 721.471304][ T2976] loop1: unable to read partition table [ 721.484685][T22099] squashfs image failed sanity check 03:42:01 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:42:01 executing program 0: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r1 = socket$pppoe(0x18, 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/246, 0xf6}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x3, 0x8001, 0x5, 0x1400}) 03:42:01 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x800000}, 0x0) 03:42:01 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f151000000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 722.060832][T22126] loop1: detected capacity change from 0 to 264192 [ 722.106882][T22126] squashfs image failed sanity check 03:42:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:03 executing program 2: syz_io_uring_setup(0x4235, &(0x7f00000000c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="5800009a692fc70000000000000000009b3d2fffa24a7bedb6a15f910fac8fde5715efee32f9b08fb0d9a0177ebfc4de2ce308aa99844e2317636421ca82deb97a2061420b4588b9f598780000000000000000000000000064f72f832998d935b544fbff72bb13eedd87c94e7ab35e6da1382e3061f390a28187420799ca44220edccd4ddf59726d35cacb1ff3c3e63a768f8f6c312902e51e"], 0x58}, 0x0, 0x804}, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}, 0xadad) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x40, 0x0, 0x0, 0xa}) 03:42:03 executing program 0: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) (async) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/246, 0xf6}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x3, 0x8001, 0x5, 0x1400}) 03:42:03 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x1000000}, 0x0) 03:42:03 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:03 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 723.393546][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 723.397997][ T14] Bluetooth: hci6: command 0x1003 tx timeout 03:42:03 executing program 0: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r1 = socket$pppoe(0x18, 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/246, 0xf6}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x3, 0x8001, 0x5, 0x1400}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) socket$pppoe(0x18, 0x1, 0x0) (async) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/246, 0xf6}], 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x3, 0x8001, 0x5, 0x1400}) (async) 03:42:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x4, 0x81, 0x100, 0xfffffffd, 0x0, 0xe}) [ 723.452881][T22143] loop1: detected capacity change from 0 to 264192 03:42:03 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x2000000}, 0x0) 03:42:03 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xfca) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x9, @vbi={0x8, 0x2, 0x4, 0x31364d4e, [0x7, 0xa00000], [0x101]}}) 03:42:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 723.542533][T22143] squashfs image failed sanity check 03:42:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x4, 0x81, 0x100, 0xfffffffd, 0x0, 0xe}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x4, 0x81, 0x100, 0xfffffffd, 0x0, 0xe}) (async) 03:42:03 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:03 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xfca) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x9, @vbi={0x8, 0x2, 0x4, 0x31364d4e, [0x7, 0xa00000], [0x101]}}) 03:42:03 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x3000000}, 0x0) 03:42:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x4, 0x81, 0x100, 0xfffffffd, 0x0, 0xe}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0xffffffff, 0x4, 0x81, 0x100, 0xfffffffd, 0x0, 0xe}) (async) [ 723.691075][T22175] loop1: detected capacity change from 0 to 264192 [ 723.697573][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 723.725641][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 723.748367][ T2976] loop1: unable to read partition table [ 723.757186][T22175] squashfs image failed sanity check 03:42:03 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:42:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08000100470000000800db00", @ANYRES32=r6, @ANYBLOB="4185c3b3883ce00354427c5fe06753784f7a225a233cc41802c8563142dd8dcb81d8f2c6580cc43f5db97211bb2e5fd5d3043b7aed3dce4cf9"], 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xa8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x65}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x77de}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x20800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000620000008000300c9eb529b7f695af8b3d213fa10cdece6d79304a0cb40c448df24", @ANYRES32=0x0, @ANYRESHEX=r11, @ANYRES32=r9, @ANYBLOB="15d276490100000000000080", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000140)=0x7141) ioctl$KDADDIO(r10, 0x400455c8, 0x40000000020) 03:42:03 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xfca) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x9, @vbi={0x8, 0x2, 0x4, 0x31364d4e, [0x7, 0xa00000], [0x101]}}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xfca) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x9, @vbi={0x8, 0x2, 0x4, 0x31364d4e, [0x7, 0xa00000], [0x101]}}) (async) 03:42:03 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x4000000}, 0x0) 03:42:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000060000000126e3347d6538e83f49cc5c74591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8ff0000000000000044c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e98177048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000007c0)={r5, 0x6, 0x6}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r5, 0x401, 0x7}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000100)={r5, 0x2000, 0x9, 0x1}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x81}) 03:42:03 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:03 executing program 0: syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x6, 0x0, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08000100470000000800db00", @ANYRES32=r6, @ANYBLOB="4185c3b3883ce00354427c5fe06753784f7a225a233cc41802c8563142dd8dcb81d8f2c6580cc43f5db97211bb2e5fd5d3043b7aed3dce4cf9"], 0x48}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) (async, rerun: 32) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xa8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x65}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x77de}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x20800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000620000008000300c9eb529b7f695af8b3d213fa10cdece6d79304a0cb40c448df24", @ANYRES32=0x0, @ANYRESHEX=r11, @ANYRES32=r9, @ANYBLOB="15d276490100000000000080", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000140)=0x7141) (async) ioctl$KDADDIO(r10, 0x400455c8, 0x40000000020) [ 724.321461][T22193] loop1: detected capacity change from 0 to 264192 03:42:03 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x7000000}, 0x0) 03:42:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000060000000126e3347d6538e83f49cc5c74591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8ff0000000000000044c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e98177048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000007c0)={r5, 0x6, 0x6}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r5, 0x401, 0x7}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000100)={r5, 0x2000, 0x9, 0x1}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x81}) 03:42:04 executing program 0: syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x6, 0x0, 0x1}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 724.397872][T22193] squashfs image failed sanity check [ 724.434286][T22199] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 724.512357][T22212] loop1: detected capacity change from 0 to 264192 [ 724.521537][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.534260][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 724.542841][ T2976] loop1: unable to read partition table [ 724.550995][T22212] squashfs image failed sanity check 03:42:04 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:42:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x8000000}, 0x0) 03:42:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000060000000126e3347d6538e83f49cc5c74591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8ff0000000000000044c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e98177048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000007c0)={r5, 0x6, 0x6}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r5, 0x401, 0x7}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000100)={r5, 0x2000, 0x9, 0x1}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x81}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000060000000126e3347d6538e83f49cc5c74591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8ff0000000000000044c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e98177048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000007c0)={r5, 0x6, 0x6}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r5, 0x401, 0x7}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000100)={r5, 0x2000, 0x9, 0x1}) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x81}) (async) 03:42:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08000100470000000800db00", @ANYRES32=r6, @ANYBLOB="4185c3b3883ce00354427c5fe06753784f7a225a233cc41802c8563142dd8dcb81d8f2c6580cc43f5db97211bb2e5fd5d3043b7aed3dce4cf9"], 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xa8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x65}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x77de}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x20800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000620000008000300c9eb529b7f695af8b3d213fa10cdece6d79304a0cb40c448df24", @ANYRES32=0x0, @ANYRESHEX=r11, @ANYRES32=r9, @ANYBLOB="15d276490100000000000080", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000140)=0x7141) ioctl$KDADDIO(r10, 0x400455c8, 0x40000000020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08000100470000000800db00", @ANYRES32=r6, @ANYBLOB="4185c3b3883ce00354427c5fe06753784f7a225a233cc41802c8563142dd8dcb81d8f2c6580cc43f5db97211bb2e5fd5d3043b7aed3dce4cf9"], 0x48}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xa8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x65}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x77de}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x20800) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000620000008000300c9eb529b7f695af8b3d213fa10cdece6d79304a0cb40c448df24", @ANYRES32=0x0, @ANYRESHEX=r11, @ANYRES32=r9, @ANYBLOB="15d276490100000000000080", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000140)=0x7141) (async) ioctl$KDADDIO(r10, 0x400455c8, 0x40000000020) (async) 03:42:04 executing program 0: syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x6, 0x0, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x6, 0x0, 0x1}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) 03:42:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) [ 725.241657][T22221] loop1: detected capacity change from 0 to 264192 03:42:04 executing program 2: clock_gettime(0x2d9bb81fe7f98c0, 0x0) r0 = syz_clone(0xf36a6500, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, 0x0) 03:42:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xa000000}, 0x0) 03:42:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x4, 0x200000) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x5, 0x81, 0x5, 0x800}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 725.313725][T22221] squashfs image failed sanity check 03:42:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f1b1000000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 725.441890][T22261] loop1: detected capacity change from 0 to 264192 [ 725.462388][T22261] squashfs image failed sanity check 03:42:05 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x8}, 0x0) 03:42:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) 03:42:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x4, 0x200000) (rerun: 32) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x5, 0x81, 0x5, 0x800}}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:05 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xe000000}, 0x0) 03:42:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001980), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000300)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 03:42:05 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x3, 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x5, 0xc592, 0x3}) [ 726.201077][T22271] loop1: detected capacity change from 0 to 264192 03:42:05 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xf000000}, 0x0) [ 726.241937][T22271] squashfs image failed sanity check 03:42:05 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$fb(&(0x7f0000efe000/0x2000)=nil, 0xffff8000, 0x0, 0x12, r0, 0x0) 03:42:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async, rerun: 64) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x3, 0x2}) (rerun: 64) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x5, 0xc592, 0x3}) 03:42:05 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:05 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000300), 0x10) [ 726.390363][T22290] loop1: detected capacity change from 0 to 264192 [ 726.397603][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.417392][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 726.440738][ T2976] loop1: unable to read partition table [ 726.453748][T22290] squashfs image failed sanity check 03:42:06 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xa}, 0x0) 03:42:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x4, 0x200000) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x5, 0x81, 0x5, 0x800}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (rerun: 64) 03:42:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x3, 0x2}) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x5, 0xc592, 0x3}) 03:42:06 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x10000000}, 0x0) 03:42:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@local, @dev, @mcast1}) 03:42:06 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:06 executing program 2: getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000040)) socketpair(0x1e, 0x0, 0x0, &(0x7f00000001c0)) 03:42:06 executing program 0: sendto(0xffffffffffffffff, &(0x7f0000000080)="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", 0xfb, 0x20000000, &(0x7f0000000180)=@l2={0x1f, 0xfff, @any, 0xbe9d, 0x1}, 0x80) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000200)={0x80000000, 0x8, "5ce9c4f5daf4660c07c54e239e412a8ddcd8e76d7faae9f4fba28622eeae1864", 0x9, 0xfffffffa, 0xcd, 0x87ad, 0x102}) [ 727.148679][T22299] loop1: detected capacity change from 0 to 264192 03:42:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3}, @val={0x0, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x0, 0x1, 0x60}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x800060}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)="c14297583890bac0d7924788c3e10190992df62b7241a8ee9854a970eee8509e91e974a72299aaea2c67a8d2becc26c2f7b5f4db7e28cebedcd9f5a239e498e111e58f44fd") 03:42:06 executing program 0: sendto(0xffffffffffffffff, &(0x7f0000000080)="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", 0xfb, 0x20000000, &(0x7f0000000180)=@l2={0x1f, 0xfff, @any, 0xbe9d, 0x1}, 0x80) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000200)={0x80000000, 0x8, "5ce9c4f5daf4660c07c54e239e412a8ddcd8e76d7faae9f4fba28622eeae1864", 0x9, 0xfffffffa, 0xcd, 0x87ad, 0x102}) sendto(0xffffffffffffffff, &(0x7f0000000080)="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", 0xfb, 0x20000000, &(0x7f0000000180)=@l2={0x1f, 0xfff, @any, 0xbe9d, 0x1}, 0x80) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000200)={0x80000000, 0x8, "5ce9c4f5daf4660c07c54e239e412a8ddcd8e76d7faae9f4fba28622eeae1864", 0x9, 0xfffffffa, 0xcd, 0x87ad, 0x102}) (async) [ 727.201158][T22299] squashfs image failed sanity check 03:42:06 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x11000000}, 0x0) 03:42:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001980), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x125e, &(0x7f00000019c0)) [ 727.284603][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 727.291783][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:42:07 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xe}, 0x0) 03:42:07 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:07 executing program 0: sendto(0xffffffffffffffff, &(0x7f0000000080)="c9883612d72f6a27201e5701b98bfe260faf287bea520416b4f4ca97c9be56d4edbcc52cdff2532b87ce426701bcb055087bd5fc23310f4f183292fb860de1fe567c4f685ef833a281886145e90b7f80dc7a430b1efca74e66fde8c155ea0618923715cef62f56f2750bf3b23b551e52612ad872c3fd29c8c05470df8fec75dfefad53f0196a2da09b38508f59735b158fcc3f3ef5eac618212d58cd45332514d90eef05702dccd83ca51e11a14102412053d1e48679b7de7627db1bf2eeb28d9cc1909454860c01d62a47b43e30bbc10cbcedacd5d951428ead922863aced1bb76981369db7f0b9c1a4e3d32934ee38b0eb07740d470f63d9bdeb", 0xfb, 0x20000000, &(0x7f0000000180)=@l2={0x1f, 0xfff, @any, 0xbe9d, 0x1}, 0x80) (async) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000200)={0x80000000, 0x8, "5ce9c4f5daf4660c07c54e239e412a8ddcd8e76d7faae9f4fba28622eeae1864", 0x9, 0xfffffffa, 0xcd, 0x87ad, 0x102}) 03:42:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3}, @val={0x0, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x0, 0x1, 0x60}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x800060}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)="c14297583890bac0d7924788c3e10190992df62b7241a8ee9854a970eee8509e91e974a72299aaea2c67a8d2becc26c2f7b5f4db7e28cebedcd9f5a239e498e111e58f44fd") 03:42:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x80201, 0x0) read$usbfs(r0, 0x0, 0x0) 03:42:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x15000000}, 0x0) 03:42:07 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8906, 0x0) [ 728.030030][T22333] loop1: detected capacity change from 0 to 264192 [ 728.059767][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 728.067580][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:42:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x1f000000}, 0x0) 03:42:07 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4}) [ 728.096081][T22333] squashfs image failed sanity check 03:42:07 executing program 2: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=""/23, &(0x7f0000000140)=0x17) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000540)={0x1f, @none}, 0x8) syz_mount_image$qnx4(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x1, &(0x7f00000007c0)=[{0x0}], 0x1000810, &(0x7f0000000840)={[{'\xff\xff\xff\xff\xff\xff'}], [{@seclabel}]}) readlinkat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, 0x0) syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="7b97a10740ef17b9ee3249c8110f8958911a6a1b5485e17da32c4fff623ff7", 0x1f, 0xc968}, {0x0, 0x0, 0x6}, {0x0}], 0x4000, 0x0) 03:42:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3}, @val={0x0, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x0, 0x1, 0x60}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x800060}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)="c14297583890bac0d7924788c3e10190992df62b7241a8ee9854a970eee8509e91e974a72299aaea2c67a8d2becc26c2f7b5f4db7e28cebedcd9f5a239e498e111e58f44fd") 03:42:07 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 728.221480][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 728.221903][T22364] loop1: detected capacity change from 0 to 264192 [ 728.238324][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 728.244888][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 728.256432][T22360] qnx4: no qnx4 filesystem (no root dir). [ 728.261735][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 728.272920][ T2976] loop1: unable to read partition table [ 728.286518][T22364] squashfs image failed sanity check [ 728.299475][T22360] loop2: detected capacity change from 0 to 201 03:42:08 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:42:08 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x30750000}, 0x0) 03:42:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4}) 03:42:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000100)=0x4) 03:42:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xa0002, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write$damon_attrs(r1, &(0x7f0000000140)={{' ', 0x2}, {' ', 0x7}, {' ', 0x7}, {' ', 0x6}, {' ', 0x2d}}, 0x69) 03:42:08 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) 03:42:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4}) 03:42:08 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x34000000}, 0x0) [ 729.000766][T22373] loop1: detected capacity change from 0 to 264192 03:42:08 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0xe0300, 0x0) 03:42:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0edac39d00"/14], 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x4000) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000310000cb5ad537c1eaa9cf4300f8ffffff00", @ANYRES32=0x0, @ANYBLOB="0c00c2", @ANYRES32=r4, @ANYBLOB="08000100470000000800db00", @ANYRES32=r5, @ANYBLOB="5fb3446c2a65738d72a7053af48d822acede24504605000000424ed90000800000"], 0x48}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x401, 0x2, 0x3, 0x1000, 0x80000000, 0x3ff, 0x8}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x244000, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x21, 0x8, 0x1, 0x100, 0x8000]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000001) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}], @NL80211_ATTR_HE_BSS_COLOR={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40995}, 0x8004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000c00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000840)={0x378, r7, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_SAE_PASSWORD={0x67, 0x115, "a279b2b279b60daee87b439f23cd566fbcf1673424b9c52dc2ebea525e2c1db0ba241ef9843771a13c789623aee5b566f9ba448e4ec22f84a048acd950a1f5b19b7db99f3f2eef39cc03aaf2e0eaa434c4f535ea82e734d85c621e0392c07bf463e745"}], @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x56, 0x3, "034fe12d2330a14e872a379a2f6239f9b46d9b0f5f046ea53f46217a71612e225bea8553cbf8f37757e1ac472af47143038ea76c600ac44e60a657edb619a0fbb28e74d2b55c46d5fb0df638f4d1f05e9f99"}, @NL80211_FTM_RESP_ATTR_LCI={0x10, 0x2, "0d377b8ddc05f5eca435bca6"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x75, 0x2, "f85f9dfa440d7f096c60506557238c9ef184489b7f24f9e365ad53b30d13a4f3b79753b24836ec75d4f2e2b58f7d1fe09422ab7e53cb47262f403b5a9d41c8659d17691f2556e2c2007817b19bee0adbcf076976ddcc4f3769f9d767be27141416cdee4f4d753fb0f1dc9782d1250bdfc0"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1e4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xc0, 0x3, "02cf5d26b9db898c6dd37426add8de0a16f6b197b25ac332ab2dd6f77a5081b96382be8bdc7aade7c48e30c2fc52c8f0d31e7c5868b2083ac577fc17e64b5b6fffe459f173961800a3d618c79d3ac3410036bf1d2bbd3bea7bfd6bc30fc4adc469616d16e441081048e969f8b81a6a4ab655b7efd7d2cea32062b37ba282bbe3cbc553c540bd1886c9e05fdc4643e3bdf4cfcfa6e3cbf29800c233d5bc909a13b8a01b58f9c6bc098528f43c6a98c6ea69724d16dff4b2bda68d84d1"}, @NL80211_FTM_RESP_ATTR_LCI={0x5c, 0x2, "2d0a57645c5811a34940b998a1dce6d453f99cdae90a32f81b94d3a19ded907b312891cd89f16a666e46797ace3ef2db367b526b96968afb5b7b15b46e7be248a59eb662e08ae642257586e4296c5c259db49575ccf1c191"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "c917dd126874f1d635f27613505f479d9a75ca24c0720a042fc2da04a6eb51b34e0562dfcffd25388b4deb25bd4c9ffa9de14592f73a128ea581d488b3e3ccd53e8731bb65bcf7126439b19771942f5349cd83b00a258be632d312c6a1f99d1df41d12ed203d4b9488107a413840888d6dd72e38d35e4d4f2bfc5d4f23da2daa47b4b3b452aacdcb7b19505b240133a38d97dac711e7b4326607ecb39abb4dbe8f1d855ffd63c7fdcd2be012d00ebd7974b35399454c"}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2b}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x378}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES8=r6, @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf25090000000800028004000400d00006802500030069ee71c81ceac5b3679e376bcfc06000cb6de9fed902e87ad4c056cb61a883eedf000000040005004700040067636d28616573290000000000000000000000ddff00000000000000000000001f0000000d80cb38ec6494ac48a23daa090f881609490bb8e97c7c8b828f15ab1e9a26d02f4cab333e2e6f6185004100040067636d28616573290000000000000000000000000000000000000000000000001900000096c4bf33f3ee6f31cbcb172b0dbbabd7b7756663e6ef2e131a00000014000300a7af9dd604725b71ebf12e3f64395b981c00098008000200ff7f0000080002002000"], 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) [ 729.073781][T22373] squashfs image failed sanity check 03:42:08 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x40000000}, 0x0) [ 729.143052][T22390] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:09 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:42:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)='q', 0x1}], 0x1}, 0x0) 03:42:09 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) (async) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0edac39d00"/14], 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x4000) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000310000cb5ad537c1eaa9cf4300f8ffffff00", @ANYRES32=0x0, @ANYBLOB="0c00c2", @ANYRES32=r4, @ANYBLOB="08000100470000000800db00", @ANYRES32=r5, @ANYBLOB="5fb3446c2a65738d72a7053af48d822acede24504605000000424ed90000800000"], 0x48}}, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x401, 0x2, 0x3, 0x1000, 0x80000000, 0x3ff, 0x8}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x244000, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x21, 0x8, 0x1, 0x100, 0x8000]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000001) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}], @NL80211_ATTR_HE_BSS_COLOR={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40995}, 0x8004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000c00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000840)={0x378, r7, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_SAE_PASSWORD={0x67, 0x115, "a279b2b279b60daee87b439f23cd566fbcf1673424b9c52dc2ebea525e2c1db0ba241ef9843771a13c789623aee5b566f9ba448e4ec22f84a048acd950a1f5b19b7db99f3f2eef39cc03aaf2e0eaa434c4f535ea82e734d85c621e0392c07bf463e745"}], @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x56, 0x3, "034fe12d2330a14e872a379a2f6239f9b46d9b0f5f046ea53f46217a71612e225bea8553cbf8f37757e1ac472af47143038ea76c600ac44e60a657edb619a0fbb28e74d2b55c46d5fb0df638f4d1f05e9f99"}, @NL80211_FTM_RESP_ATTR_LCI={0x10, 0x2, "0d377b8ddc05f5eca435bca6"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x75, 0x2, "f85f9dfa440d7f096c60506557238c9ef184489b7f24f9e365ad53b30d13a4f3b79753b24836ec75d4f2e2b58f7d1fe09422ab7e53cb47262f403b5a9d41c8659d17691f2556e2c2007817b19bee0adbcf076976ddcc4f3769f9d767be27141416cdee4f4d753fb0f1dc9782d1250bdfc0"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1e4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xc0, 0x3, "02cf5d26b9db898c6dd37426add8de0a16f6b197b25ac332ab2dd6f77a5081b96382be8bdc7aade7c48e30c2fc52c8f0d31e7c5868b2083ac577fc17e64b5b6fffe459f173961800a3d618c79d3ac3410036bf1d2bbd3bea7bfd6bc30fc4adc469616d16e441081048e969f8b81a6a4ab655b7efd7d2cea32062b37ba282bbe3cbc553c540bd1886c9e05fdc4643e3bdf4cfcfa6e3cbf29800c233d5bc909a13b8a01b58f9c6bc098528f43c6a98c6ea69724d16dff4b2bda68d84d1"}, @NL80211_FTM_RESP_ATTR_LCI={0x5c, 0x2, "2d0a57645c5811a34940b998a1dce6d453f99cdae90a32f81b94d3a19ded907b312891cd89f16a666e46797ace3ef2db367b526b96968afb5b7b15b46e7be248a59eb662e08ae642257586e4296c5c259db49575ccf1c191"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "c917dd126874f1d635f27613505f479d9a75ca24c0720a042fc2da04a6eb51b34e0562dfcffd25388b4deb25bd4c9ffa9de14592f73a128ea581d488b3e3ccd53e8731bb65bcf7126439b19771942f5349cd83b00a258be632d312c6a1f99d1df41d12ed203d4b9488107a413840888d6dd72e38d35e4d4f2bfc5d4f23da2daa47b4b3b452aacdcb7b19505b240133a38d97dac711e7b4326607ecb39abb4dbe8f1d855ffd63c7fdcd2be012d00ebd7974b35399454c"}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2b}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x378}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) (async) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES8=r6, @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) [ 729.930691][T22397] loop1: detected capacity change from 0 to 264192 [ 729.983781][T22397] squashfs image failed sanity check 03:42:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xa0002, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write$damon_attrs(r1, &(0x7f0000000140)={{' ', 0x2}, {' ', 0x7}, {' ', 0x7}, {' ', 0x6}, {' ', 0x2d}}, 0x69) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xa0002, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x7) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) write$damon_attrs(r1, &(0x7f0000000140)={{' ', 0x2}, {' ', 0x7}, {' ', 0x7}, {' ', 0x6}, {' ', 0x2d}}, 0x69) (async) 03:42:10 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x40020000}, 0x0) 03:42:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) (async) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0edac39d00"/14], 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x4000) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000310000cb5ad537c1eaa9cf4300f8ffffff00", @ANYRES32=0x0, @ANYBLOB="0c00c2", @ANYRES32=r4, @ANYBLOB="08000100470000000800db00", @ANYRES32=r5, @ANYBLOB="5fb3446c2a65738d72a7053af48d822acede24504605000000424ed90000800000"], 0x48}}, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x401, 0x2, 0x3, 0x1000, 0x80000000, 0x3ff, 0x8}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x244000, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x21, 0x8, 0x1, 0x100, 0x8000]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000001) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}], @NL80211_ATTR_HE_BSS_COLOR={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40995}, 0x8004) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000c00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000840)={0x378, r7, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_SAE_PASSWORD={0x67, 0x115, "a279b2b279b60daee87b439f23cd566fbcf1673424b9c52dc2ebea525e2c1db0ba241ef9843771a13c789623aee5b566f9ba448e4ec22f84a048acd950a1f5b19b7db99f3f2eef39cc03aaf2e0eaa434c4f535ea82e734d85c621e0392c07bf463e745"}], @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x56, 0x3, "034fe12d2330a14e872a379a2f6239f9b46d9b0f5f046ea53f46217a71612e225bea8553cbf8f37757e1ac472af47143038ea76c600ac44e60a657edb619a0fbb28e74d2b55c46d5fb0df638f4d1f05e9f99"}, @NL80211_FTM_RESP_ATTR_LCI={0x10, 0x2, "0d377b8ddc05f5eca435bca6"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x75, 0x2, "f85f9dfa440d7f096c60506557238c9ef184489b7f24f9e365ad53b30d13a4f3b79753b24836ec75d4f2e2b58f7d1fe09422ab7e53cb47262f403b5a9d41c8659d17691f2556e2c2007817b19bee0adbcf076976ddcc4f3769f9d767be27141416cdee4f4d753fb0f1dc9782d1250bdfc0"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1e4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xc0, 0x3, "02cf5d26b9db898c6dd37426add8de0a16f6b197b25ac332ab2dd6f77a5081b96382be8bdc7aade7c48e30c2fc52c8f0d31e7c5868b2083ac577fc17e64b5b6fffe459f173961800a3d618c79d3ac3410036bf1d2bbd3bea7bfd6bc30fc4adc469616d16e441081048e969f8b81a6a4ab655b7efd7d2cea32062b37ba282bbe3cbc553c540bd1886c9e05fdc4643e3bdf4cfcfa6e3cbf29800c233d5bc909a13b8a01b58f9c6bc098528f43c6a98c6ea69724d16dff4b2bda68d84d1"}, @NL80211_FTM_RESP_ATTR_LCI={0x5c, 0x2, "2d0a57645c5811a34940b998a1dce6d453f99cdae90a32f81b94d3a19ded907b312891cd89f16a666e46797ace3ef2db367b526b96968afb5b7b15b46e7be248a59eb662e08ae642257586e4296c5c259db49575ccf1c191"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "c917dd126874f1d635f27613505f479d9a75ca24c0720a042fc2da04a6eb51b34e0562dfcffd25388b4deb25bd4c9ffa9de14592f73a128ea581d488b3e3ccd53e8731bb65bcf7126439b19771942f5349cd83b00a258be632d312c6a1f99d1df41d12ed203d4b9488107a413840888d6dd72e38d35e4d4f2bfc5d4f23da2daa47b4b3b452aacdcb7b19505b240133a38d97dac711e7b4326607ecb39abb4dbe8f1d855ffd63c7fdcd2be012d00ebd7974b35399454c"}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2b}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x378}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES8=r6, @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) 03:42:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@local, @dev, @mcast1, 0x0, 0x7, 0x2, 0x100, 0x0, 0x400000}) 03:42:10 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:10 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x11}, 0x0) [ 731.074246][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) [ 731.139712][T22416] loop1: detected capacity change from 0 to 264192 03:42:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000080)={0x3, 0x0, [0x6, 0xfffffffc, 0x7, 0x1, 0x1, 0x8, 0x5, 0x5]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:10 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x4c1d0000}, 0x0) [ 731.188028][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 731.195484][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 731.205034][T22416] squashfs image failed sanity check 03:42:10 executing program 2: socket$inet6(0xa, 0x0, 0x9fab) 03:42:10 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000080)={0x3, 0x0, [0x6, 0xfffffffc, 0x7, 0x1, 0x1, 0x8, 0x5, 0x5]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000080)={0x3, 0x0, [0x6, 0xfffffffc, 0x7, 0x1, 0x1, 0x8, 0x5, 0x5]}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) 03:42:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xa0002, 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x7) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) write$damon_attrs(r1, &(0x7f0000000140)={{' ', 0x2}, {' ', 0x7}, {' ', 0x7}, {' ', 0x6}, {' ', 0x2d}}, 0x69) (rerun: 64) 03:42:10 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x983a0000}, 0x0) 03:42:10 executing program 2: bpf$MAP_CREATE(0x3, 0x0, 0x4800) 03:42:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:11 executing program 2: syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x50100) [ 731.356445][T22446] loop1: detected capacity change from 0 to 264192 [ 731.393703][T22446] squashfs image failed sanity check 03:42:11 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x15}, 0x0) 03:42:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000080)={0x3, 0x0, [0x6, 0xfffffffc, 0x7, 0x1, 0x1, 0x8, 0x5, 0x5]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000080)={0x3, 0x0, [0x6, 0xfffffffc, 0x7, 0x1, 0x1, 0x8, 0x5, 0x5]}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) 03:42:11 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:11 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xe8030000}, 0x0) 03:42:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "fd83bb7456632b5d208a90b163f5f63febec0fa2458b38bd90ca9535bba1e4540ed10099721d765b96ffac00778ef933d48b8b788eda29c6c1d7b2789c01899a", "6602b814b536ab4e2608111c4b6b11b597bb256c4c5085a459d1450241612f1b"}) 03:42:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000100)="94", 0x1}], 0x2}, 0x0) [ 731.998856][T22478] loop1: detected capacity change from 0 to 264192 03:42:11 executing program 0: munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:11 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xf4010000}, 0x0) [ 732.052350][T22478] squashfs image failed sanity check 03:42:11 executing program 0: munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x21, 0x0, &(0x7f0000000140)) 03:42:11 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 732.196496][T22504] loop1: detected capacity change from 0 to 264192 [ 732.224769][T22504] squashfs image failed sanity check 03:42:12 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x34}, 0x0) 03:42:12 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xffffff7f}, 0x0) 03:42:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x0, 0x0, 0x7}, 0x48) 03:42:12 executing program 0: munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) 03:42:12 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:12 executing program 2: syz_open_dev$vcsu(&(0x7f0000000c80), 0x0, 0x4800) [ 732.946004][T22512] loop1: detected capacity change from 0 to 264192 03:42:12 executing program 0: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:12 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x8000000000}, 0x0) 03:42:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000cc0)="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", 0x577}, {&(0x7f0000000100)="94", 0x1}, {&(0x7f0000001cc0)="05565cd77f3ddd479d742173e108", 0xe}], 0x3}, 0x1) 03:42:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 733.002772][T22512] squashfs image failed sanity check 03:42:12 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 733.127790][T22533] loop1: detected capacity change from 0 to 264192 [ 733.139661][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 733.150218][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 733.158796][ T2976] loop1: unable to read partition table [ 733.165794][T22533] squashfs image failed sanity check 03:42:13 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x1f4}, 0x0) 03:42:13 executing program 0: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) 03:42:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) 03:42:13 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x2000000000000}, 0x0) 03:42:13 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 03:42:13 executing program 0: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) [ 733.849646][T22541] loop1: detected capacity change from 0 to 264192 03:42:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:13 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x14280000000000}, 0x0) 03:42:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000000)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x0, 0x4, 0x40, 0x1000, 0x0, 0x9}) 03:42:13 executing program 2: syz_mount_image$qnx4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 733.919535][T22541] squashfs image failed sanity check 03:42:14 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x240}, 0x0) 03:42:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020000000000000000003100000008a34edbfe1600010000001cf14b16d6768eab338ed93200", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="08000100128000000800db00", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000000)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x0, 0x4, 0x40, 0x1000, 0x0, 0x9}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000000)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x0, 0x4, 0x40, 0x1000, 0x0, 0x9}) (async) 03:42:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 03:42:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x40000000000000}, 0x0) 03:42:14 executing program 2: getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 03:42:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020000000000000000003100000008a34edbfe1600010000001cf14b16d6768eab338ed93200", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="08000100128000000800db00", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 734.774943][T22570] loop1: detected capacity change from 0 to 264192 03:42:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x80000000000000}, 0x0) 03:42:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000000)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x0, 0x4, 0x40, 0x1000, 0x0, 0x9}) [ 734.820176][T22570] squashfs image failed sanity check 03:42:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0xfe}]}}}], 0x18}, 0x0) 03:42:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 734.859832][T22581] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 734.909578][T22597] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 734.943160][T22598] loop1: detected capacity change from 0 to 264192 [ 734.965831][T22598] squashfs image failed sanity check 03:42:15 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:42:15 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x100000000000000}, 0x0) 03:42:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020000000000000000003100000008a34edbfe1600010000001cf14b16d6768eab338ed93200", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="08000100128000000800db00", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020000000000000000003100000008a34edbfe1600010000001cf14b16d6768eab338ed93200", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="08000100128000000800db00", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/76, 0x4c}], 0x1, 0x1, 0x1f) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:15 executing program 2: r0 = getpid() ptrace(0xffffffffffffffff, r0) r1 = syz_clone(0x40100200, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000001180)) r2 = open$dir(&(0x7f00000011c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000001200)=@v1={0x0, @aes128, 0x8, @desc1}) getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') 03:42:15 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f003f00000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/76, 0x4c}], 0x1, 0x1, 0x1f) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) [ 735.707746][T22606] loop1: detected capacity change from 0 to 264192 03:42:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x185c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:15 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x200000000000000}, 0x0) 03:42:15 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f004000000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 735.768683][T22606] squashfs image failed sanity check 03:42:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/76, 0x4c}], 0x1, 0x1, 0x1f) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/76, 0x4c}], 0x1, 0x1, 0x1f) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) 03:42:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x185c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 735.892370][T22636] loop1: detected capacity change from 0 to 264192 [ 735.965873][T22636] squashfs image failed sanity check 03:42:16 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x3e8}, 0x0) 03:42:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x185c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:16 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x300000000000000}, 0x0) 03:42:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_freezer_state(r0, 0x0, 0x0) 03:42:16 executing program 0: syz_mount_image$omfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="973e7e5347ec0b020db57d633da3ceca85991b5f89b9359071fd9c09b4a98f93f4633a86484531b587e784a3d3262c4c4bcb3575f7ba223c7e711b34b3b7edfdf1d7ea299a7460a9abe49082dc490b5b1d392382c25b301e780b", 0x5a, 0xfff}, {&(0x7f00000001c0), 0x0, 0x8}], 0x1, &(0x7f0000000240)={[{'-])'}, {'\x00'}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'\x00'}, {'+)*{['}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'/dev/swradio#\x00'}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '(\'+&.'}}, {@appraise}]}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x4, 0x84c, 0x2, 0x9, 0x1, 0x1c}) 03:42:16 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f005d00000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:16 executing program 2: syz_clone(0x7340480, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 03:42:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfd6f49441acb6f35, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8011) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:16 executing program 0: syz_mount_image$omfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="973e7e5347ec0b020db57d633da3ceca85991b5f89b9359071fd9c09b4a98f93f4633a86484531b587e784a3d3262c4c4bcb3575f7ba223c7e711b34b3b7edfdf1d7ea299a7460a9abe49082dc490b5b1d392382c25b301e780b", 0x5a, 0xfff}, {&(0x7f00000001c0), 0x0, 0x8}], 0x1, &(0x7f0000000240)={[{'-])'}, {'\x00'}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'\x00'}, {'+)*{['}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'/dev/swradio#\x00'}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '(\'+&.'}}, {@appraise}]}) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x4, 0x84c, 0x2, 0x9, 0x1, 0x1c}) 03:42:16 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x400000000000000}, 0x0) [ 736.659603][T22652] loop1: detected capacity change from 0 to 264192 [ 736.721356][T22652] squashfs image failed sanity check 03:42:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfd6f49441acb6f35, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8011) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfd6f49441acb6f35, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8011) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:16 executing program 0: syz_mount_image$omfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="973e7e5347ec0b020db57d633da3ceca85991b5f89b9359071fd9c09b4a98f93f4633a86484531b587e784a3d3262c4c4bcb3575f7ba223c7e711b34b3b7edfdf1d7ea299a7460a9abe49082dc490b5b1d392382c25b301e780b", 0x5a, 0xfff}, {&(0x7f00000001c0), 0x0, 0x8}], 0x1, &(0x7f0000000240)={[{'-])'}, {'\x00'}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'\x00'}, {'+)*{['}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'/dev/swradio#\x00'}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '(\'+&.'}}, {@appraise}]}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x4, 0x84c, 0x2, 0x9, 0x1, 0x1c}) syz_mount_image$omfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="973e7e5347ec0b020db57d633da3ceca85991b5f89b9359071fd9c09b4a98f93f4633a86484531b587e784a3d3262c4c4bcb3575f7ba223c7e711b34b3b7edfdf1d7ea299a7460a9abe49082dc490b5b1d392382c25b301e780b", 0x5a, 0xfff}, {&(0x7f00000001c0), 0x0, 0x8}], 0x1, &(0x7f0000000240)={[{'-])'}, {'\x00'}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'\x00'}, {'+)*{['}, {'/dev/dlm-control\x00'}, {'/dev/dlm-control\x00'}, {'/dev/swradio#\x00'}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '(\'+&.'}}, {@appraise}]}) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x4, 0x84c, 0x2, 0x9, 0x1, 0x1c}) (async) 03:42:17 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:42:17 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {&(0x7f0000001380)="d9", 0x1}], 0x3}, 0x0) 03:42:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfd6f49441acb6f35, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8011) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xfd6f49441acb6f35, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8011) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:17 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x700000000000000}, 0x0) 03:42:17 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:17 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) (async) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:17 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]}) [ 737.567231][T22683] loop1: detected capacity change from 0 to 264192 03:42:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:17 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x800000000000000}, 0x0) [ 737.612187][T22683] squashfs image failed sanity check 03:42:17 executing program 0: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x0, 0x0, 0x0, 0x40b}, 0x48) [ 737.653529][ T26] audit: type=1326 audit(2000000537.229:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22692 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb1a89109 code=0x0 03:42:18 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:42:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:18 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f009900000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:18 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xa00000000000000}, 0x0) 03:42:18 executing program 2: syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2200) 03:42:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000060000000126e3347d6538e83f49cc5c74591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8ff0000000000000044c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e98177048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r3, 0x6, 0x6}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r3, 0x401, 0x7}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={r3, 0x2, 0x125, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x48}}, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:18 executing program 2: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x101d0) [ 738.478307][T22711] loop1: detected capacity change from 0 to 264192 03:42:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000060000000126e3347d6538e83f49cc5c74591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8ff0000000000000044c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e98177048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r3, 0x6, 0x6}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r3, 0x401, 0x7}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={r3, 0x2, 0x125, 0x1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x48}}, 0x0) (async) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:18 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xe00000000000000}, 0x0) 03:42:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3, 0x80000001, 0x9, 0x5, 0xf, "e8625e661604edcb43e49a5c37a7f1cd355a8a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 738.525529][T22711] squashfs image failed sanity check 03:42:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000006c0), 0x4) 03:42:18 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 03:42:18 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000060000000126e3347d6538e83f49cc5c74591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8ff0000000000000044c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e98177048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r3, 0x6, 0x6}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r3, 0x401, 0x7}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={r3, 0x2, 0x125, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x48}}, 0x0) (async) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x0, 0x0, 0x0, 0x4e}, 0x48) 03:42:18 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xf00000000000000}, 0x0) 03:42:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x0, 0x0, 0x0, 0x3f4}, 0x48) [ 739.390246][T22734] loop1: detected capacity change from 0 to 264192 03:42:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0xe196, 0xdae40d146a916978, 0xb}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='system.posix_acl_access\x00') ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x3, 0xfffffff8, @name="99c137865e43d9c226a71200e42cc09306c76c72d3060b98b98599d6819d3185"}) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/sco\x00') fallocate(r0, 0x6, 0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f00000002c0)={0x0, 0xffffffffffffff80}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000002", @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r7, @ANYBLOB="08000100470000000800db00", @ANYRES32=r8, @ANYBLOB], 0x48}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000100) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}}, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(r8, 0xc0285629, &(0x7f0000000200)={0x0, 0x6, 0x1, '\x00', &(0x7f00000001c0)=0x80}) 03:42:19 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x1000000000000000}, 0x0) [ 739.433957][T22734] squashfs image failed sanity check 03:42:19 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x9, 0x2000, 0x104, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x84000}, 0x48) [ 739.541419][T22754] loop1: detected capacity change from 0 to 264192 [ 739.599825][T22754] squashfs image failed sanity check 03:42:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3, 0x80000001, 0x9, 0x5, 0xf, "e8625e661604edcb43e49a5c37a7f1cd355a8a"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0xe196, 0xdae40d146a916978, 0xb}) (async) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='system.posix_acl_access\x00') (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x3, 0xfffffff8, @name="99c137865e43d9c226a71200e42cc09306c76c72d3060b98b98599d6819d3185"}) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/sco\x00') (async) fallocate(r0, 0x6, 0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f00000002c0)={0x0, 0xffffffffffffff80}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000002", @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r7, @ANYBLOB="08000100470000000800db00", @ANYRES32=r8, @ANYBLOB], 0x48}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000100) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}}, 0x0) (async) dup(0xffffffffffffffff) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r8, 0xc0285629, &(0x7f0000000200)={0x0, 0x6, 0x1, '\x00', &(0x7f00000001c0)=0x80}) 03:42:20 executing program 2: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 03:42:20 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x1100000000000000}, 0x0) 03:42:20 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:20 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 740.674216][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 740.674300][ T3681] Bluetooth: hci6: command 0x1003 tx timeout 03:42:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r1, 0x211, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x38}}, 0x0) [ 740.719503][T22761] loop1: detected capacity change from 0 to 264192 [ 740.752974][T22761] squashfs image failed sanity check 03:42:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0xe196, 0xdae40d146a916978, 0xb}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='system.posix_acl_access\x00') ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x3, 0xfffffff8, @name="99c137865e43d9c226a71200e42cc09306c76c72d3060b98b98599d6819d3185"}) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/sco\x00') fallocate(r0, 0x6, 0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f00000002c0)={0x0, 0xffffffffffffff80}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000002", @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r7, @ANYBLOB="08000100470000000800db00", @ANYRES32=r8, @ANYBLOB], 0x48}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000100) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}}, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(r8, 0xc0285629, &(0x7f0000000200)={0x0, 0x6, 0x1, '\x00', &(0x7f00000001c0)=0x80}) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0xe196, 0xdae40d146a916978, 0xb}) (async) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='system.posix_acl_access\x00') (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x3, 0xfffffff8, @name="99c137865e43d9c226a71200e42cc09306c76c72d3060b98b98599d6819d3185"}) (async) syz_open_procfs(r1, &(0x7f0000000100)='net/sco\x00') (async) fallocate(r0, 0x6, 0x9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000280)) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f00000002c0)={0x0, 0xffffffffffffff80}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000002", @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r7, @ANYBLOB="08000100470000000800db00", @ANYRES32=r8, @ANYBLOB], 0x48}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000100) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}}, 0x0) (async) dup(0xffffffffffffffff) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r8, 0xc0285629, &(0x7f0000000200)={0x0, 0x6, 0x1, '\x00', &(0x7f00000001c0)=0x80}) (async) 03:42:20 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x1500000000000000}, 0x0) 03:42:20 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:20 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x28}]}) 03:42:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x1, 0x1, 0x2, "8ceabd800191c8d3ece3798f7bc76484309a9d"}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0xfffffffe, 0x4}) [ 740.929603][T22793] loop1: detected capacity change from 0 to 264192 [ 740.954060][T22793] squashfs image failed sanity check 03:42:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3, 0x80000001, 0x9, 0x5, 0xf, "e8625e661604edcb43e49a5c37a7f1cd355a8a"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x1f00000000000000}, 0x0) 03:42:22 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35}, {0x6}]}) 03:42:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x1, 0x1, 0x2, "8ceabd800191c8d3ece3798f7bc76484309a9d"}) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0xfffffffe, 0x4}) 03:42:22 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00ff00000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:22 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 742.833586][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 742.833620][ T3681] Bluetooth: hci6: command 0x1003 tx timeout 03:42:22 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xac}, {0x6}]}) [ 742.873056][ T26] audit: type=1326 audit(2000000542.449:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22798 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb1a89109 code=0x0 [ 742.902615][T22804] loop1: detected capacity change from 0 to 264192 03:42:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x3075000000000000}, 0x0) 03:42:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x1, 0x1, 0x2, "8ceabd800191c8d3ece3798f7bc76484309a9d"}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0xfffffffe, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x1, 0x1, 0x2, "8ceabd800191c8d3ece3798f7bc76484309a9d"}) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0xfffffffe, 0x4}) (async) [ 742.954285][T22804] squashfs image failed sanity check [ 742.974004][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 742.981838][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:42:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x3400000000000000}, 0x0) 03:42:22 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x4, {0xffffffff, 0x3, 0x0, 0x3f}}) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x1}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x100000, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x258, r2, 0x330, 0x70bd2a, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x9c, 0xfa, "71d0607da2f9b32bc76f17cf7db2924223860d60a13b5313d0955e75cc15c8620a1fe567edf63e3d2beb98ae84d2e4ad8b30f900c84ae37a1af780fef2bd9d20e1bc878de87ac60be5dc34a7323bcf0eb7305bec049bebb54d0f0f9f7117bf8ee6384eb1e4621dcbb28cc45ff590694304ed332fe7030113e969b1b981d7b9d8623893bc8a52dfab5a53fa5f0f8862f1c070b054776bd9d6"}, @NL80211_ATTR_FILS_ERP_REALM={0xd4, 0xfa, "5bc12dbb36c917bd7123339f2297996dd75b3be1c313d9a5adb1ce330ef018d1b7badbd397c649ef412991e45bd0899dd957e5110482452299ed3ca21641c7c5960583af22d989cbf3465093d55526ddcc00ec3c5b8167d22a1983f49549c6f645bd2addda60cb1ea2139288ae0abd5764f701aab611dea2ffd12f2e3b84df1e83f6bd603e34cb389f6d399b67448e16643ee88d623975264e25af3701cfbeb1b18b70710b1479277a8e8aaa630357da7a7a4abbb4e739df03bc747d1050c20a7b4cc9d07507f8e5996b05a28c5f4fd0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "5880"}, @NL80211_ATTR_FILS_ERP_REALM={0x84, 0xfa, "0ad7cc1f7d7c0b7377f0f725763f447461f84d8b82e3eb92fd0cc697197376774d117ce45c74c647e8918af130973cf30f73761cd34d344903f6c1f816ce502a5257b9a15532fd778c748d91f1e0c244be64c3fc2300ae4588154e196085a5c5ca717eae0d295e9209a51298811bf29d57341cacb65a4d2e943a66dc145f5fcf"}]]}, 0x258}, 0x1, 0x0, 0x0, 0x8080}, 0x5) [ 743.014366][ T26] audit: type=1326 audit(2000000542.599:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22818 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb1a89109 code=0x0 03:42:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x9, 0x2000, 0x104}, 0x48) 03:42:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x4000000000000000}, 0x0) 03:42:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x4, {0xffffffff, 0x3, 0x0, 0x3f}}) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x1}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x100000, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x258, r2, 0x330, 0x70bd2a, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x9c, 0xfa, "71d0607da2f9b32bc76f17cf7db2924223860d60a13b5313d0955e75cc15c8620a1fe567edf63e3d2beb98ae84d2e4ad8b30f900c84ae37a1af780fef2bd9d20e1bc878de87ac60be5dc34a7323bcf0eb7305bec049bebb54d0f0f9f7117bf8ee6384eb1e4621dcbb28cc45ff590694304ed332fe7030113e969b1b981d7b9d8623893bc8a52dfab5a53fa5f0f8862f1c070b054776bd9d6"}, @NL80211_ATTR_FILS_ERP_REALM={0xd4, 0xfa, "5bc12dbb36c917bd7123339f2297996dd75b3be1c313d9a5adb1ce330ef018d1b7badbd397c649ef412991e45bd0899dd957e5110482452299ed3ca21641c7c5960583af22d989cbf3465093d55526ddcc00ec3c5b8167d22a1983f49549c6f645bd2addda60cb1ea2139288ae0abd5764f701aab611dea2ffd12f2e3b84df1e83f6bd603e34cb389f6d399b67448e16643ee88d623975264e25af3701cfbeb1b18b70710b1479277a8e8aaa630357da7a7a4abbb4e739df03bc747d1050c20a7b4cc9d07507f8e5996b05a28c5f4fd0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "5880"}, @NL80211_ATTR_FILS_ERP_REALM={0x84, 0xfa, "0ad7cc1f7d7c0b7377f0f725763f447461f84d8b82e3eb92fd0cc697197376774d117ce45c74c647e8918af130973cf30f73761cd34d344903f6c1f816ce502a5257b9a15532fd778c748d91f1e0c244be64c3fc2300ae4588154e196085a5c5ca717eae0d295e9209a51298811bf29d57341cacb65a4d2e943a66dc145f5fcf"}]]}, 0x258}, 0x1, 0x0, 0x0, 0x8080}, 0x5) 03:42:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (rerun: 32) [ 743.131757][T22837] loop1: detected capacity change from 0 to 264192 [ 743.188844][T22837] squashfs image failed sanity check [ 743.238223][T22846] ptm ptm0: ldisc open failed (-12), clearing slot 0 03:42:23 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x1500}, 0x0) 03:42:23 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x4, {0xffffffff, 0x3, 0x0, 0x3f}}) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x1}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x100000, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x258, r2, 0x330, 0x70bd2a, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x9c, 0xfa, "71d0607da2f9b32bc76f17cf7db2924223860d60a13b5313d0955e75cc15c8620a1fe567edf63e3d2beb98ae84d2e4ad8b30f900c84ae37a1af780fef2bd9d20e1bc878de87ac60be5dc34a7323bcf0eb7305bec049bebb54d0f0f9f7117bf8ee6384eb1e4621dcbb28cc45ff590694304ed332fe7030113e969b1b981d7b9d8623893bc8a52dfab5a53fa5f0f8862f1c070b054776bd9d6"}, @NL80211_ATTR_FILS_ERP_REALM={0xd4, 0xfa, "5bc12dbb36c917bd7123339f2297996dd75b3be1c313d9a5adb1ce330ef018d1b7badbd397c649ef412991e45bd0899dd957e5110482452299ed3ca21641c7c5960583af22d989cbf3465093d55526ddcc00ec3c5b8167d22a1983f49549c6f645bd2addda60cb1ea2139288ae0abd5764f701aab611dea2ffd12f2e3b84df1e83f6bd603e34cb389f6d399b67448e16643ee88d623975264e25af3701cfbeb1b18b70710b1479277a8e8aaa630357da7a7a4abbb4e739df03bc747d1050c20a7b4cc9d07507f8e5996b05a28c5f4fd0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "5880"}, @NL80211_ATTR_FILS_ERP_REALM={0x84, 0xfa, "0ad7cc1f7d7c0b7377f0f725763f447461f84d8b82e3eb92fd0cc697197376774d117ce45c74c647e8918af130973cf30f73761cd34d344903f6c1f816ce502a5257b9a15532fd778c748d91f1e0c244be64c3fc2300ae4588154e196085a5c5ca717eae0d295e9209a51298811bf29d57341cacb65a4d2e943a66dc145f5fcf"}]]}, 0x258}, 0x1, 0x0, 0x0, 0x8080}, 0x5) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x4, {0xffffffff, 0x3, 0x0, 0x3f}}) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x1}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x100000, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x258, r2, 0x330, 0x70bd2a, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x9c, 0xfa, "71d0607da2f9b32bc76f17cf7db2924223860d60a13b5313d0955e75cc15c8620a1fe567edf63e3d2beb98ae84d2e4ad8b30f900c84ae37a1af780fef2bd9d20e1bc878de87ac60be5dc34a7323bcf0eb7305bec049bebb54d0f0f9f7117bf8ee6384eb1e4621dcbb28cc45ff590694304ed332fe7030113e969b1b981d7b9d8623893bc8a52dfab5a53fa5f0f8862f1c070b054776bd9d6"}, @NL80211_ATTR_FILS_ERP_REALM={0xd4, 0xfa, "5bc12dbb36c917bd7123339f2297996dd75b3be1c313d9a5adb1ce330ef018d1b7badbd397c649ef412991e45bd0899dd957e5110482452299ed3ca21641c7c5960583af22d989cbf3465093d55526ddcc00ec3c5b8167d22a1983f49549c6f645bd2addda60cb1ea2139288ae0abd5764f701aab611dea2ffd12f2e3b84df1e83f6bd603e34cb389f6d399b67448e16643ee88d623975264e25af3701cfbeb1b18b70710b1479277a8e8aaa630357da7a7a4abbb4e739df03bc747d1050c20a7b4cc9d07507f8e5996b05a28c5f4fd0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "5880"}, @NL80211_ATTR_FILS_ERP_REALM={0x84, 0xfa, "0ad7cc1f7d7c0b7377f0f725763f447461f84d8b82e3eb92fd0cc697197376774d117ce45c74c647e8918af130973cf30f73761cd34d344903f6c1f816ce502a5257b9a15532fd778c748d91f1e0c244be64c3fc2300ae4588154e196085a5c5ca717eae0d295e9209a51298811bf29d57341cacb65a4d2e943a66dc145f5fcf"}]]}, 0x258}, 0x1, 0x0, 0x0, 0x8080}, 0x5) (async) 03:42:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 03:42:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:23 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x4002000000000000}, 0x0) 03:42:23 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:23 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x45}]}) [ 743.761779][T22859] loop1: detected capacity change from 0 to 264192 03:42:23 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x4c1d000000000000}, 0x0) 03:42:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000001", @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r9, @ANYBLOB="080001004736d31a36a0f1cc", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) [ 743.808156][T22859] squashfs image failed sanity check 03:42:23 executing program 2: socket(0x2, 0x0, 0xa03) 03:42:23 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_ENUMAUDIO(r11, 0xc0345641, &(0x7f0000000140)={0x1, "c3cb38c441d0ae3241288ed8d28d7a8894e9f1f21fe25c1c11f29c49a0e1f6cc", 0x2, 0x1}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000ca49403c64d4b46b5cab7d4d727f8364da424483ac0fa9278f92a89579f74e93bf755ddc8b1ab26f", @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r10, @ANYBLOB="08000100470000000800db00", @ANYRES32=r11, @ANYBLOB], 0x48}}, 0x0) ioctl$VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000200)={0x6, @sliced={0xe5c5, [0x8, 0x4, 0x2, 0x80, 0x4, 0x8, 0x3ff, 0x9, 0x200, 0x100, 0x72c2, 0x7ff, 0x4, 0x8001, 0x80, 0x2e, 0x80, 0x4, 0x4d, 0x8, 0x4, 0x5, 0x800, 0x1, 0x8, 0x5, 0x1, 0x200, 0x3, 0xfff, 0x5, 0x81, 0x7, 0x67, 0x6, 0x1, 0xffff, 0x3ff, 0x83f, 0x101, 0x5, 0x40, 0xff, 0x4, 0x80, 0xc, 0x200, 0x8], 0x3}}) 03:42:23 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000330000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 743.954344][T22888] loop1: detected capacity change from 0 to 264192 [ 743.976393][T22888] squashfs image failed sanity check 03:42:24 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) 03:42:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_ENUMAUDIO(r11, 0xc0345641, &(0x7f0000000140)={0x1, "c3cb38c441d0ae3241288ed8d28d7a8894e9f1f21fe25c1c11f29c49a0e1f6cc", 0x2, 0x1}) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000ca49403c64d4b46b5cab7d4d727f8364da424483ac0fa9278f92a89579f74e93bf755ddc8b1ab26f", @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r10, @ANYBLOB="08000100470000000800db00", @ANYRES32=r11, @ANYBLOB], 0x48}}, 0x0) (async, rerun: 32) ioctl$VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000200)={0x6, @sliced={0xe5c5, [0x8, 0x4, 0x2, 0x80, 0x4, 0x8, 0x3ff, 0x9, 0x200, 0x100, 0x72c2, 0x7ff, 0x4, 0x8001, 0x80, 0x2e, 0x80, 0x4, 0x4d, 0x8, 0x4, 0x5, 0x800, 0x1, 0x8, 0x5, 0x1, 0x200, 0x3, 0xfff, 0x5, 0x81, 0x7, 0x67, 0x6, 0x1, 0xffff, 0x3ff, 0x83f, 0x101, 0x5, 0x40, 0xff, 0x4, 0x80, 0xc, 0x200, 0x8], 0x3}}) 03:42:24 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000380)={'pim6reg0\x00'}) 03:42:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000001", @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r9, @ANYBLOB="080001004736d31a36a0f1cc", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup3(r1, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000001", @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r9, @ANYBLOB="080001004736d31a36a0f1cc", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) 03:42:24 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x983a000000000000}, 0x0) 03:42:24 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000000040000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x9, 0x2000, 0x40004}, 0x48) [ 744.698224][T22892] loop1: detected capacity change from 0 to 264192 03:42:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_ENUMAUDIO(r11, 0xc0345641, &(0x7f0000000140)={0x1, "c3cb38c441d0ae3241288ed8d28d7a8894e9f1f21fe25c1c11f29c49a0e1f6cc", 0x2, 0x1}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000ca49403c64d4b46b5cab7d4d727f8364da424483ac0fa9278f92a89579f74e93bf755ddc8b1ab26f", @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r10, @ANYBLOB="08000100470000000800db00", @ANYRES32=r11, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000200)={0x6, @sliced={0xe5c5, [0x8, 0x4, 0x2, 0x80, 0x4, 0x8, 0x3ff, 0x9, 0x200, 0x100, 0x72c2, 0x7ff, 0x4, 0x8001, 0x80, 0x2e, 0x80, 0x4, 0x4d, 0x8, 0x4, 0x5, 0x800, 0x1, 0x8, 0x5, 0x1, 0x200, 0x3, 0xfff, 0x5, 0x81, 0x7, 0x67, 0x6, 0x1, 0xffff, 0x3ff, 0x83f, 0x101, 0x5, 0x40, 0xff, 0x4, 0x80, 0xc, 0x200, 0x8], 0x3}}) 03:42:24 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xe803000000000000}, 0x0) 03:42:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000001", @ANYRES16=r7, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r9, @ANYBLOB="080001004736d31a36a0f1cc", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) [ 744.753233][T22892] squashfs image failed sanity check 03:42:24 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0003bae00000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 744.911768][T22925] loop1: detected capacity change from 0 to 264192 [ 744.912688][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 744.954972][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 744.971522][ T2976] loop1: unable to read partition table [ 744.987334][T22925] squashfs image failed sanity check 03:42:25 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x8c, r0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="c457d9d0564ad14ed2057a72595538858b12ce0b684a767b451d800a3428af6d60ed7b16e0a50769a8f07c1cc8f6069bb043af8fd1e7b7ac7c1b027f2a13e82c0e181e50724389dc3dbd21ced1a18126b78ab7cd54adc18099599d7d2f1bc372c4f9264d193ab9a0ad625124899cdc7fcd32cf1b39b1cebb7b60205e48c3c382f6003cd83fb5f05d0c7a0da781c27c24416b3ab441ad393faecb4cc267e735249ed1e5b7e630b38c3519f111d3ed9885c3bc58430a6d2d", 0xb7}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/module/nf_conntrack_tftp', 0x400, 0x41) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="010200090000000000000000", @ANYRES32=r2, @ANYBLOB="80000000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001480)={{0x1, 0x1, 0x18, r2, {0xdc}}, './file0\x00'}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000014c0)={0xc161, 0x4, 0x4, 0x0, 0x5, {}, {0x2, 0x2, 0x80, 0x8, 0x1, 0x2, "18e5b425"}, 0x0, 0x4, {}, 0x13, 0x0, r5}) 03:42:25 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xf401000000000000}, 0x0) 03:42:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:25 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x3400}, 0x0) 03:42:25 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 745.628180][T22932] loop1: detected capacity change from 0 to 264192 [ 745.664385][T22937] IPVS: Unknown mcast interface: netpci0 03:42:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 745.675799][T22932] squashfs image failed sanity check 03:42:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x5452, &(0x7f0000000040)="94") 03:42:25 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x8c, r0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="c457d9d0564ad14ed2057a72595538858b12ce0b684a767b451d800a3428af6d60ed7b16e0a50769a8f07c1cc8f6069bb043af8fd1e7b7ac7c1b027f2a13e82c0e181e50724389dc3dbd21ced1a18126b78ab7cd54adc18099599d7d2f1bc372c4f9264d193ab9a0ad625124899cdc7fcd32cf1b39b1cebb7b60205e48c3c382f6003cd83fb5f05d0c7a0da781c27c24416b3ab441ad393faecb4cc267e735249ed1e5b7e630b38c3519f111d3ed9885c3bc58430a6d2d", 0xb7}], 0x2) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/module/nf_conntrack_tftp', 0x400, 0x41) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="010200090000000000000000", @ANYRES32=r2, @ANYBLOB="80000000000000002e2f66696c653000"]) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001480)={{0x1, 0x1, 0x18, r2, {0xdc}}, './file0\x00'}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000014c0)={0xc161, 0x4, 0x4, 0x0, 0x5, {}, {0x2, 0x2, 0x80, 0x8, 0x1, 0x2, "18e5b425"}, 0x0, 0x4, {}, 0x13, 0x0, r5}) 03:42:25 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xffffff7f00000000}, 0x0) 03:42:25 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 746.336252][T22948] loop1: detected capacity change from 0 to 264192 03:42:25 executing program 2: prctl$PR_SET_SECCOMP(0x34, 0x0, &(0x7f0000000080)={0x0, 0x0}) 03:42:25 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0xffffffff00000000}, 0x0) [ 746.377115][T22948] squashfs image failed sanity check 03:42:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x14, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 03:42:26 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x8c, r0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="c457d9d0564ad14ed2057a72595538858b12ce0b684a767b451d800a3428af6d60ed7b16e0a50769a8f07c1cc8f6069bb043af8fd1e7b7ac7c1b027f2a13e82c0e181e50724389dc3dbd21ced1a18126b78ab7cd54adc18099599d7d2f1bc372c4f9264d193ab9a0ad625124899cdc7fcd32cf1b39b1cebb7b60205e48c3c382f6003cd83fb5f05d0c7a0da781c27c24416b3ab441ad393faecb4cc267e735249ed1e5b7e630b38c3519f111d3ed9885c3bc58430a6d2d", 0xb7}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/module/nf_conntrack_tftp', 0x400, 0x41) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="010200090000000000000000", @ANYRES32=r2, @ANYBLOB="80000000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001480)={{0x1, 0x1, 0x18, r2, {0xdc}}, './file0\x00'}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000014c0)={0xc161, 0x4, 0x4, 0x0, 0x5, {}, {0x2, 0x2, 0x80, 0x8, 0x1, 0x2, "18e5b425"}, 0x0, 0x4, {}, 0x13, 0x0, r5}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x8c, r0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="c457d9d0564ad14ed2057a72595538858b12ce0b684a767b451d800a3428af6d60ed7b16e0a50769a8f07c1cc8f6069bb043af8fd1e7b7ac7c1b027f2a13e82c0e181e50724389dc3dbd21ced1a18126b78ab7cd54adc18099599d7d2f1bc372c4f9264d193ab9a0ad625124899cdc7fcd32cf1b39b1cebb7b60205e48c3c382f6003cd83fb5f05d0c7a0da781c27c24416b3ab441ad393faecb4cc267e735249ed1e5b7e630b38c3519f111d3ed9885c3bc58430a6d2d", 0xb7}], 0x2) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/module/nf_conntrack_tftp', 0x400, 0x41) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="010200090000000000000000", @ANYRES32=r2, @ANYBLOB="80000000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001480)={{0x1, 0x1, 0x18, r2, {0xdc}}, './file0\x00'}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000014c0)={0xc161, 0x4, 0x4, 0x0, 0x5, {}, {0x2, 0x2, 0x80, 0x8, 0x1, 0x2, "18e5b425"}, 0x0, 0x4, {}, 0x13, 0x0, r5}) (async) [ 746.434896][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.441419][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 03:42:26 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:42:26 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x2}, 0x0) 03:42:26 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0003baec0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:26 executing program 2: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xa) [ 746.490136][T22964] IPVS: Unknown mcast interface: netpci0 [ 746.509391][T22966] IPVS: Unknown mcast interface: netpci0 03:42:26 executing program 2: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffb) mlockall(0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) 03:42:26 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3}, 0x0) [ 746.538587][T22979] loop1: detected capacity change from 0 to 264192 [ 746.556292][T22979] squashfs image failed sanity check 03:42:26 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 746.676931][T22989] loop1: detected capacity change from 0 to 264192 [ 746.703009][T22989] squashfs image failed sanity check 03:42:28 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4}, 0x0) 03:42:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=none,version=9p2000.u,access=', @ANYRESDEC, @ANYBLOB=',cache=none,obj_user=,^-%,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',fscontext=unconfined_u,fowner=', @ANYRESDEC=r2, @ANYBLOB='p\x00']) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x300, 0x0) 03:42:28 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:28 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x4002}, 0x0) [ 748.433566][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x301, 0x0) 03:42:28 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x7}, 0x0) 03:42:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=none,version=9p2000.u,access=', @ANYRESDEC, @ANYBLOB=',cache=none,obj_user=,^-%,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',fscontext=unconfined_u,fowner=', @ANYRESDEC=r2, @ANYBLOB='p\x00']) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) [ 748.483037][T22998] loop1: detected capacity change from 0 to 264192 [ 748.494335][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 748.502472][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 748.540429][T22998] squashfs image failed sanity check 03:42:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=none,version=9p2000.u,access=', @ANYRESDEC, @ANYBLOB=',cache=none,obj_user=,^-%,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',fscontext=unconfined_u,fowner=', @ANYRESDEC=r2, @ANYBLOB='p\x00']) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) 03:42:28 executing program 2: syz_mount_image$erofs(&(0x7f0000000280), 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)={[], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) 03:42:28 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x8}, 0x0) 03:42:28 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:28 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xa}, 0x0) 03:42:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0xb, @sdr={0x38414762, 0x10}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x0) 03:42:28 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, &(0x7f0000000380)={'pim6reg0\x00'}) [ 748.671070][T23023] loop1: detected capacity change from 0 to 264192 [ 748.677639][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.690538][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 748.700001][ T2976] loop1: unable to read partition table [ 748.710331][T23023] squashfs image failed sanity check 03:42:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0xb, @sdr={0x38414762, 0x10}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0xb, @sdr={0x38414762, 0x10}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x0) (async) 03:42:28 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xe}, 0x0) 03:42:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x9, 0x6, 0xc003, 0x2}, 0x48) 03:42:28 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xe803}, 0x0) 03:42:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:30 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:30 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xf}, 0x0) 03:42:30 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0xb, @sdr={0x38414762, 0x10}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4}) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x0) 03:42:30 executing program 2: syz_clone(0x2404a000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:30 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xf401}, 0x0) [ 750.674310][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:30 executing program 0: syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x6, 0x1, 0x9, 0x100, 0x0, 0x5, 0x6}) 03:42:30 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x10}, 0x0) 03:42:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x18, r1, 0x211, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) [ 750.721434][T23048] loop1: detected capacity change from 0 to 264192 [ 750.750193][T23048] Page size > filesystem block size (512). This is currently not supported! 03:42:30 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1102000000000000000009000000240004"], 0x38}}, 0x0) 03:42:30 executing program 0: syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x6, 0x1, 0x9, 0x100, 0x0, 0x5, 0x6}) [ 750.882202][T23065] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 750.892599][T23067] loop1: detected capacity change from 0 to 264192 [ 750.918382][T23067] Page size > filesystem block size (768). This is currently not supported! 03:42:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:32 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x11}, 0x0) 03:42:32 executing program 0: syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x6, 0x1, 0x9, 0x100, 0x0, 0x5, 0x6}) 03:42:32 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='.\x00'}, 0x10) 03:42:32 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 03:42:32 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 752.833715][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 752.841694][T22811] Bluetooth: hci6: command tx timeout 03:42:32 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) 03:42:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="66254593779ba153a232859bedff9c831aed6f25e4513bb38ea42d1e3b11a02ac977bcb78328947953485f62e410e9b3b7938976bd3f3b19d52abc7a99739fa4c05ff67594915646afc41c1adf152a9a528b3744c9e6635fd064c15bac522f510b51afe80d05f5e11320db7c3a16664628a5e24580afe5186d372ee0a36a34740a3a098f95c849cce3ba573b0f37881b6a1b72aae113027f161b42c4e6fcf31f3ea3b097ac115f2af04347ffe2e9926b38912801e6f4758ed0aa5d6b398d54cdc20c3cd04f06ead0d780ad8c13b7467572b30240e04f75d399f26a8866d3093b145ffe282a001805587f2d080fe7a7e5", 0xf0}, {&(0x7f0000000340)="8421e4280d6d828940115b8d0111059411c89a3782d480986d8b9302d42b8cc5afbe0c329584669f5ff9c1828a66bea3b29d603ebf17a239aa11d772b157eb39bbffda030011ae347b8793a40e29bac8dcef5497db5a84fbfd7a2148fd9ee45c984e2d17c3f1436fc844d313c763ead8b945b6458c80f8455ad6d5db324eb0694c5dda26d4bea96246bd946b0e49575802f541c0c60355265ec51f271823c9c1b28e08df22edc9192ee1fdb9071083b2e97b94ff98fc30d88a8bccdf3f02cc62ad045c5b4cf2acf55046545769118c515853dad98967024a161dc9691c5437cf9d38c74645dd12f06b86b426e5bb8d5c7d4b28f5f09f1a30f0095625d95ac65f2a409d7bdb006017926a0a9e5f422f7ea10ee6080797d1ddbfc3d76c8b5ebb6ec7ab7ff99924a8429e51c50fcd963a17e9325ba4609535c09484437e5ae961e4da7d09c34bd05a79994d477d80d3b65ed151903eeeb551388f716a765a2eca74adc581a8c609816592f32312ae23e478d334ef81b9f576df5dc8e0572eb5d30fbd0b806ad331ae17816c77ffa5aa0b68ed75f2547a1c1e0b4756a74822a2d2ce1641305b95f0bfd0bfd164c3e877193e5644e44f8ee70ae3f9430c980c9247c77bd0dff4cffcbe8c85dcbb1eeb91b2b570b2f93e6f6dcd292f67ac9b7f0ef4d1d10738f346c195e3ee80523d74575ec7646582942aff354e00a20ecf90012d373d914ea80b0be2de17edfd75647d0b5e0c3b9fc86b1e4760fa7bfc76d7f16b3164968475d9b1f43d164d17a42f979a8cbdce954fd11ad1345555973b8180997bf838a82e3e5300be26678d7f92b9e8890fdb960f1ccbfd638980f42d112e5c3a80b57a9eac713e924aebff6c8860c2dc3c47fc047d47a1eff126f5f83e3be99337e06684051f94d5d81e4a6bbeec5885ac1e494081756a582858de285790e3c667c778f36528519993dafab572dd6aaebd6ad80cb619ecbd4ae11a6261ccd4b28d845ba740d256d328cd57d3fcf66b010c32156b74c84218635bb8ed6c9bfafe124bd9cdfc19cf14e7c4d2bbe4d767f6c613c7fff69ce7f4a80da86b613d1810556d45a481f3196330fe5c16e014b317b2d290e6a53ce46c69e4cd3d7730e0b8626897ebba181398a74ed365876343c3843e6f0ddcdcfc0b5be0b634f9666738c48514db2de30b3dbb097c7df60edd17c6212e98ce5884f1c87c8d67d9591912caac56710f7ce290cd931f547041acfe4967be81357e4efe5522578aca43ce8a87bc41962825893f40b735c28e7852d2c69285c71a3bdf295a1c9ca5551fd13303b6e19510dcef03a570d55ffb0defb418f70666a8b761e10bfe5055e43c5118733e139f15387f7fb06df3c8854545a7e67c05149cb6b1b49b09248589cf06280c8d9ce89d22dfc384da5b5d987703e773059f53ea1b25166b8f0cf55db7a67d37f76f5df0b56ca6c60dd190e27a7c6f5439bcd38c8cd713a73c9668a927db2ee791c660e363c86a492502b8ce29e5506a5ca70758884243ff53ea53747b3515cabd31b6cf72bfea8cae1e2b8c572dcb9e47193edb63320bdfcad90d7e24451aa915c93aa4b0369bdec5f2f1e5e5b7254e6974c29057dddc0cca09f646db721095cddd97332abc654b6dc7872265cf8c581d0c13b0fa5adf95d7f2b64328f44b0b6ec1c31b1af90690e79b2f5f3da9e00e99c6fd600e4078849a9de68d58486f6a9295b3d8e749accc0a6ad8b5a7198e60704291e6b62771a6a56531046ed97c884d010a34318c8ad2e674e272e154b34756ce1e5e087a081b6202b2ee7b3e6bafebf8047c3bb4b8f165457fd2c86663e810032677dc72b687e06f325db72d09f3afe0fca5e25fffe0fe10925f1528e861fcfd3b28267b2bc501126e53c928f89c4429a420289c2a07d20ece2adb72fc2892bc2852b66668f834197f68a5678338e3ec9a32f4c762093ce1b921313bf8ed39fc6e76891da07fab026a21c59d1a8ee5552edba4ef842bdf2f915a8a9ef64f04dbba742f35184502a2c0ee899d94116df839f7bb3715e91255e9c42040bb6c3a068f1b9f0bc1831d4f7588784f738c650bd57a439e0e0ba3ef0d27395791d62914cb3226e59ece2395341c8432a14aa1066bb670f66828db68f4aa56419f0f0d141b45145ae6a76f8cc9024315576928ecdffa4d0b2078f1c1fec0dd305662b552a0bcde1cc0b741bb29bb24e0d9a2fbaf185ff65c23247ba9f478a25e1386f8c47db35797fb0804849962653e3576fee59b5d08ea0005215eabe657b19bfd3b9714bf463f07b914c76b85d159a9f398efacddbe5d2c75c9c5fcfae414bbbcf5b7782609076e9fa0a48ae1fd60228ab49ae0d13ef366c58263d1940616087635edaeb71de7efd71532a40d8f9f69b381baaa2c3319c1c6632d2e171b553cdc2aacd39c29c716dfc220d30d0a3be9d03674aa40513bea86750f345a409d9edd00279b2c581fabd8159a36e9994aec5eb3c147f5ee8b310b95abb79aec118bbe57b4b765114f8c3f1b92ac1d9ea14d0dd0d02f353e1aebce439eeb07ab2323f12f264ced3bc690bb16d74f57094c9be9f8692a88058ae9ca211a71d1d5b3404ae58c96ce866802c889acad63511fe6618703f8af40e269e17ce7f67bb618858c451c44a3d810066208d34d2724c26087f640144f74fe306dfe939a33eb3441baf6be67895075e50ce4fc22b327ee086b9df25d5b8608e86db03303a00ae6c21f87efc2064d6ab967d7f0b79abcffb34ca0da0dd65447efc1e6e45d7f7f8bc8fb70a90d61939c12f6e0e396d37f9f8e1fc8c5dec8638cd153c07c420548022923cca4ea335df1bb9689df30faf85a2b83332f023f1cdc4b8a08a6f5c0879099f13a6d35762b07d133ae559941378122f9b790ab729c26389e940457cd5d590e871360ebcf41009d091db82763561faf89fd05a18f8c49d234aa24ff88ae9a23c4fec39b516da4580d605637f50476fee250504306c4ef90de317e5604a4f02ef375a3490c092689d96d46e939900e82ad78241792aff889f72407942a577b2516d996fcf26c34b57229284fbf14c5d63d6a0e1d5de5739960b6d974c5123b74012f1aa5b4f28110ecf24a9568de405dc004234ccbf14d70dac683d70f4c58fceee4b49954165b00038952692ed8297e60eb1c87cbbebf11dbbbdcdd7be83b5b83d740ece7d0d22c71f74b5d3f656b8cddbdac762927c3b73df95b73371100d06170e1e720270bb460bcacb3855ff1441babe49a6990edcd3561dc6db596745d4ca58b2dd53ab306fbbe68116108472a44fbbea03d0a2b86131852136701f4fdb0b09932f9af3721e7cfe00d99d29bf9d78545b989dd9eb0edb817f023078f34559607b65456502fab70de9bf5a6f1feffc4a5d88827f5f5cc78594d955db400b2d4c51252583fb3a0cf735e9d76f3641d7f041f027c55ffd78c9af924725410bcc900dca4c6e73c230c633cc5e4f89cfc0428cae6965c638dd3e8c54c8163cca2dc48c624dcf7b079ae13aafcd2acdff22ff8040e5246c9ff97248655631ae3741f52a5d741a4ccf6d7dd8f0469f0a6f975349c72efb83fdca5fbec6826288a14cd80b3c493e12b8f2eb1f63036c44d713b7eb83b6716cd9a441a2c321027ecb4c4b8462d05a3e3ae18f7afec5425932612835391620b06c777006d5a63326bf7e9e5f2fd2fc6c110f2494c0cc12d7830e0b3d94ed5fbc2298dc4a1952a6c8c3345babce591aed25e43515928a52988ece5427a527b8eefc3afc7abf94fb479125faf741988c4fe12859fbca4b40d3dfeb775559e9b2a745ec4cffc0d379ab762e11b558ca7d5635f2dc490fd9a7036600d0d07a19357c66da16367e1b613ec129f4d35d30c2035d0d3bd22565b031145c6f4db751d66eed580433d0177f8c3b9892cea704308b8f227e7e39a1b3a574d833db08b4bda0482d04ca3a23fdef1d6141be88ef300a531263a64caa883e88f37194ca41104bcf11206c1428833b33125d5d3ce96681a56edae48055b8f88d8d14b8404ed177e9e8af6729828b0a86b67fe6b24638e7dfe13d540d3c6f00f29a45f0e19c1e604bb6b66805e0d928ee912c7d3015a8a5b7fd5404901866e873818df234dd25ee4333bb107f09c02762d771318b406828aad2cc129b44179f874d0ffed7f450ed717649906be99b2beee98ea6e05d6bd11433fd168cfa931713da89ba4332b57c21b771de7978dcfc5cd68c3625df2c202364b3d590ed3b412b0b778d55cc901ecae2921527f0a5bb6e50ad84633b5d006bd49dfe0b4f5dc1643bea82e67c643e0458c200b55ef2bf6204d60e2767387fd11e60d11889adcdbf5ffde017feb568d791aec87e52d7425c5d8fd3e289cc27d6a05bc0293ee6826e22929e426156067b27a7304ab1f3e04a72b7723c6a9b90e567c1afadc88cea91e9f03705adca36a22f9ff3e66fb5004ddaa5723a2faec75326d6297b6225a03ca68cb023b182724a09902725a2873224bf15e0c29f0b50dfd2aea9d5b15302988b1cba47ac00d4902ae991b8de6ac70e15ac2fd1d45061fca60b1a5c8eb12e29ea17138440098e69e08e066923b3564b6f8658035e2fdb6066dd1468dc016bbab10e316deece286b2fef737a8c24cc671602b925d20c714724de6c6078c475a6d5b6077e25e2a2fca8c45ec184eac3ff75e1435d63c29a30e091d1ea6c5258c032e550276cd39f59f754eefc89b87ee7a4334b20e9f202761363d42e2e93fbaebb9b3735b8e8a97fdad42be798cb222b00e149a272fcd528f995e0e1fe5768b88e4db026ea0ad3cdea21fbc3abb79a5bd398792645b82d5915d5dc9e6eae4e03bf6f6fc35a6b6de88382ea420ead68b29a03b9a99a4327e124fe207ceeab14bf3977663f9406f5497f39d82c50bbe9b", 0xd90}, {&(0x7f0000001340)='.', 0x1}], 0x3}, 0x0) [ 752.889351][T23077] loop1: detected capacity change from 0 to 264192 [ 752.916811][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 752.924539][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:42:32 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x15}, 0x0) 03:42:32 executing program 2: syz_clone(0x2001000, 0x0, 0x8, 0x0, 0x0, 0x0) 03:42:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x15}]}) [ 752.949481][T23077] Page size > filesystem block size (1024). This is currently not supported! 03:42:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000000)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:32 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:32 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001a40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r2}) 03:42:32 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x34}, 0x0) 03:42:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x34}]}) [ 753.063053][T23099] loop1: detected capacity change from 0 to 264192 [ 753.073998][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 753.076826][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.080807][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 753.100290][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read 03:42:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x3c}}, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x7fc1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 753.121978][ T2976] loop1: unable to read partition table [ 753.135699][T23099] Page size > filesystem block size (1280). This is currently not supported! [ 753.235159][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 753.242692][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:42:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x9, 0x6, 0x1f00}, 0x48) 03:42:33 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1f4}, 0x0) 03:42:33 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x25}]}) 03:42:33 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:33 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x142800}, 0x0) 03:42:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x3c}}, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x7fc1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x3c}}, 0x0) (async) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x7fc1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:42:33 executing program 2: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) [ 753.756457][T23111] loop1: detected capacity change from 0 to 264192 [ 753.790668][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 753.798234][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:42:33 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x240}, 0x0) [ 753.815097][T23111] Page size > filesystem block size (1536). This is currently not supported! 03:42:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580), 0x10}, 0x80) 03:42:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x3c}}, 0x0) (async) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x7fc1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:33 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000700000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:33 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x300}, 0x0) [ 753.935339][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 753.942659][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 754.025377][T23140] loop1: detected capacity change from 0 to 264192 [ 754.071139][T23140] Page size > filesystem block size (1792). This is currently not supported! 03:42:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d}, {0x6}]}) 03:42:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xfff9, 0x0, 0x0, 0x0, 0x0, "6f83f6da240bfe79"}) 03:42:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0xfff, 0x40, 0x3, 0x0, "864961bde80ddd89f285423f4f9b9417467574"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:33 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3e8}, 0x0) [ 754.238216][ T26] audit: type=1326 audit(2000000553.819:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23149 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fc0689109 code=0x0 03:42:34 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x281400}, 0x0) 03:42:34 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:34 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8920, &(0x7f0000000380)={'pim6reg0\x00'}) 03:42:34 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x700}, 0x0) 03:42:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 03:42:34 executing program 2: r0 = socket(0x18, 0x0, 0x1) getpeername$unix(r0, 0x0, 0x0) 03:42:34 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xa00}, 0x0) 03:42:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x9, 0x3ffdcf, 0x104}, 0x48) [ 754.709406][T23158] loop1: detected capacity change from 0 to 264192 [ 754.747941][T23158] Page size > filesystem block size (2048). This is currently not supported! 03:42:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x50000000}) 03:42:34 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xe00}, 0x0) 03:42:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0xfff, 0x40, 0x3, 0x0, "864961bde80ddd89f285423f4f9b9417467574"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r1, 0x211, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x3}]}]}]}, 0x38}}, 0x0) 03:42:35 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:35 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c}, 0x4c}, 0x300}, 0x0) 03:42:35 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xf00}, 0x0) 03:42:35 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x400000}, 0x0) [ 756.273496][ T3686] Bluetooth: hci6: command 0x1003 tx timeout [ 756.279673][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:35 executing program 2: getpid() syz_clone(0x40100200, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:35 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1100}, 0x0) 03:42:35 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x456082) [ 756.324053][T23177] loop1: detected capacity change from 0 to 264192 [ 756.341955][T23177] Page size > filesystem block size (2304). This is currently not supported! 03:42:36 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:36 executing program 0: futex(&(0x7f0000000040), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x2) 03:42:36 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1500}, 0x0) [ 756.496807][T23194] loop1: detected capacity change from 0 to 264192 [ 756.546689][T23194] Page size > filesystem block size (2560). This is currently not supported! 03:42:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0xfff, 0x40, 0x3, 0x0, "864961bde80ddd89f285423f4f9b9417467574"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:42:38 executing program 2: prctl$PR_SET_SECCOMP(0x27, 0x0, &(0x7f0000000080)={0x0, 0x0}) 03:42:38 executing program 0: r0 = socket(0x18, 0x0, 0x1) bind(r0, 0x0, 0x0) 03:42:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1d4c}, 0x0) 03:42:38 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:38 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x800000}, 0x0) [ 758.513578][T22811] Bluetooth: hci6: command 0x1003 tx timeout [ 758.519777][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x9, 0x6, 0x4002}, 0x48) 03:42:38 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 758.595059][T23209] loop1: detected capacity change from 0 to 264192 [ 758.635199][T23209] Page size > filesystem block size (2816). This is currently not supported! 03:42:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1f00}, 0x0) [ 758.649757][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 758.657576][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:42:38 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 03:42:38 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) 03:42:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3075}, 0x0) 03:42:38 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x16}, {0x6}]}) [ 758.758167][T23225] loop1: detected capacity change from 0 to 264192 [ 758.769529][T23225] Page size > filesystem block size (3072). This is currently not supported! 03:42:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3400}, 0x0) 03:42:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8902, &(0x7f0000000380)={'pim6reg0\x00'}) [ 758.809932][ T26] audit: type=1326 audit(2000000558.389:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23227 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb1a89109 code=0x0 03:42:38 executing program 2: syz_clone(0x22100200, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:39 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:42:39 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000d00000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:39 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3a98}, 0x0) 03:42:39 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000200)='reno\x00', 0x5) write$tcp_congestion(r0, &(0x7f0000000000)='htcp\x00', 0x5) 03:42:39 executing program 2: ioperm(0xfb6, 0x200, 0x0) 03:42:39 executing program 0: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) [ 759.440375][T23244] loop1: detected capacity change from 0 to 264192 [ 759.478860][T23244] Page size > filesystem block size (3328). This is currently not supported! 03:42:40 executing program 2: syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x2a, &(0x7f0000000180)={0x5, 0xf, 0x2a, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}, @ext_cap={0x7}]}}) 03:42:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) 03:42:40 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 03:42:40 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4000}, 0x0) 03:42:40 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:42:40 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000e00000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 760.833522][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 760.833651][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:40 executing program 0: ioperm(0x0, 0x3, 0x0) syz_clone(0x0, 0x0, 0xd, 0x0, 0x0, 0x0) 03:42:40 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4002}, 0x0) [ 760.894916][T23256] loop1: detected capacity change from 0 to 264192 [ 760.948025][T23256] Page size > filesystem block size (3584). This is currently not supported! 03:42:40 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4c1d}, 0x0) 03:42:40 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) 03:42:40 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:40 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) [ 761.086540][T23276] loop1: detected capacity change from 0 to 264192 [ 761.110277][T23276] Page size > filesystem block size (3840). This is currently not supported! [ 761.183547][ T3686] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 761.633794][ T3686] usb 3-1: not running at top speed; connect to a high speed hub [ 761.733522][ T3686] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 761.742534][ T3686] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 761.755454][ T3686] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.963565][ T3686] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.974830][ T3686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.982929][ T3686] usb 3-1: Product: syz [ 761.991689][ T3686] usb 3-1: Manufacturer: syz [ 761.998767][ T3686] usb 3-1: SerialNumber: syz [ 762.313593][ T3686] usb 3-1: 0:2 : does not exist [ 762.326283][ T3686] usb 3-1: USB disconnect, device number 3 03:42:42 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2c}, {0x6}]}) [ 762.783991][ T26] audit: type=1326 audit(2000000562.369:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23279 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb1a89109 code=0x0 03:42:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) 03:42:42 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x7530}, 0x0) 03:42:42 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) 03:42:42 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:42 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:42:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc) [ 762.993464][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 763.003584][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x9, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 03:42:42 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) 03:42:42 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x983a}, 0x0) [ 763.061055][T23290] loop1: detected capacity change from 0 to 264192 [ 763.094526][T23290] squashfs image failed sanity check 03:42:42 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) 03:42:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f00000002c0), 0xc) 03:42:42 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xe803}, 0x0) 03:42:42 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001200000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:42 executing program 0: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x9a3060, &(0x7f0000000140)) 03:42:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x1c}}, 0x0) 03:42:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2000, 0x1}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESDEC=r0, @ANYRES64=r3, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="040002000000000008000000", @ANYRES64=r6, @ANYBLOB="10000600000000002000070000000000"], 0x54, 0x1) syz_io_uring_setup(0x43d4, &(0x7f00000002c0)={0x0, 0x750f, 0x0, 0x1, 0x158, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x9, 0x800}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) [ 763.237873][T23308] loop1: detected capacity change from 0 to 264192 [ 763.263416][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 763.282119][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 763.293976][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 763.301412][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 763.321888][ T2976] loop1: unable to read partition table [ 763.333882][T23308] squashfs image failed sanity check 03:42:43 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:42:43 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xf401}, 0x0) 03:42:43 executing program 0: clock_gettime(0x0, 0x0) r0 = syz_clone(0xf36a6500, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) ioperm(0x1, 0x914, 0x3) 03:42:43 executing program 2: ptrace$setopts(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:42:43 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:43 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4c}, {0x6}]}) 03:42:43 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x20000}, 0x0) [ 763.914489][T23319] loop1: detected capacity change from 0 to 264192 [ 763.941078][T23319] squashfs image failed sanity check [ 763.992806][ T26] audit: type=1326 audit(2000000563.569:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=23328 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb1a89109 code=0x0 03:42:43 executing program 2: unshare(0x400) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) 03:42:43 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x142800}, 0x0) 03:42:43 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f003100000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:43 executing program 2: r0 = syz_clone(0x2006400, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) [ 764.112844][T23339] loop1: detected capacity change from 0 to 264192 [ 764.161596][T23339] squashfs image failed sanity check 03:42:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2000, 0x1}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESDEC=r0, @ANYRES64=r3, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="040002000000000008000000", @ANYRES64=r6, @ANYBLOB="10000600000000002000070000000000"], 0x54, 0x1) (async, rerun: 32) syz_io_uring_setup(0x43d4, &(0x7f00000002c0)={0x0, 0x750f, 0x0, 0x1, 0x158, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async, rerun: 32) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x9, 0x800}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 03:42:45 executing program 0: clock_gettime(0x0, 0x0) r0 = syz_clone(0xf36a6500, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) ioperm(0x1, 0x914, 0x3) 03:42:45 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x281400}, 0x0) 03:42:45 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:42:45 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:45 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:42:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x2c, r1, 0x211, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 03:42:45 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x400000}, 0x0) [ 766.292128][T23348] loop1: detected capacity change from 0 to 264192 [ 766.345606][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 766.352932][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 766.381841][T23348] squashfs image failed sanity check 03:42:46 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x800000}, 0x0) [ 766.394348][T23364] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 766.406437][T23364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x2000, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 03:42:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2000, 0x1}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESDEC=r0, @ANYRES64=r3, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="040002000000000008000000", @ANYRES64=r6, @ANYBLOB="10000600000000002000070000000000"], 0x54, 0x1) syz_io_uring_setup(0x43d4, &(0x7f00000002c0)={0x0, 0x750f, 0x0, 0x1, 0x158, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x9, 0x800}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2000, 0x1}, 0x18) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresuid(0x0, r4, 0x0) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESDEC=r0, @ANYRES64=r3, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="040002000000000008000000", @ANYRES64=r6, @ANYBLOB="10000600000000002000070000000000"], 0x54, 0x1) (async) syz_io_uring_setup(0x43d4, &(0x7f00000002c0)={0x0, 0x750f, 0x0, 0x1, 0x158, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x9, 0x800}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) (async) 03:42:46 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:46 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1000000}, 0x0) 03:42:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5452, &(0x7f0000000000)="94") 03:42:46 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x2000000}, 0x0) 03:42:46 executing program 0: clock_gettime(0x0, 0x0) r0 = syz_clone(0xf36a6500, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) ioperm(0x1, 0x914, 0x3) [ 766.578966][T23389] loop1: detected capacity change from 0 to 264192 03:42:46 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3000000}, 0x0) [ 766.619720][T23389] squashfs image failed sanity check [ 766.784789][ T1083] Bluetooth: Error in BCSP hdr checksum [ 767.044135][T22120] Bluetooth: Error in BCSP hdr checksum 03:42:46 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 03:42:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b41, 0x0) 03:42:46 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:46 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4000000}, 0x0) 03:42:46 executing program 0: clock_gettime(0x0, 0x0) r0 = syz_clone(0xf36a6500, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) ioperm(0x1, 0x914, 0x3) [ 767.164427][T23406] loop1: detected capacity change from 0 to 264192 [ 767.227735][T23406] squashfs image failed sanity check [ 767.305645][ T1083] Bluetooth: Error in BCSP hdr checksum [ 767.570095][T22121] Bluetooth: Error in BCSP hdr checksum [ 767.824196][T22120] Bluetooth: Error in BCSP hdr checksum [ 768.085388][T22121] Bluetooth: Error in BCSP hdr checksum [ 768.346047][T22120] Bluetooth: Error in BCSP hdr checksum [ 768.595156][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 768.601690][T19230] Bluetooth: hci6: command 0x1003 tx timeout [ 768.608731][ T6342] Bluetooth: Error in BCSP hdr checksum [ 768.864903][T22120] Bluetooth: Error in BCSP hdr checksum [ 769.123770][T22120] Bluetooth: Error in BCSP hdr checksum [ 769.383754][T22120] Bluetooth: Error in BCSP hdr checksum 03:42:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3c1b40, 0x0) 03:42:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b41, 0x0) 03:42:49 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x7000000}, 0x0) 03:42:49 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b2f, 0x0) 03:42:49 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 03:42:49 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x8000000}, 0x0) 03:42:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b41, 0x0) 03:42:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b34, 0x0) [ 769.556104][T23420] loop1: detected capacity change from 0 to 264192 [ 769.579780][T23420] squashfs image failed sanity check 03:42:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b41, 0x0) 03:42:49 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:49 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xa000000}, 0x0) [ 769.719035][T23434] loop1: detected capacity change from 0 to 264192 [ 769.752264][T23434] squashfs image failed sanity check 03:42:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3c1b40, 0x0) 03:42:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b34, 0x0) 03:42:51 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xe000000}, 0x0) 03:42:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x4b41, 0x0) 03:42:51 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00b300000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:51 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 771.633558][T19230] Bluetooth: hci6: command 0x1003 tx timeout [ 771.633644][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b34, 0x0) 03:42:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x4b41, 0x0) 03:42:51 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xf000000}, 0x0) [ 771.704945][T23450] loop1: detected capacity change from 0 to 264192 [ 771.739786][T23450] squashfs image failed sanity check 03:42:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b34, 0x0) 03:42:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x4b41, 0x0) 03:42:51 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 771.876475][T23463] loop1: detected capacity change from 0 to 264192 [ 771.911322][T23463] squashfs image failed sanity check 03:42:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3c1b40, 0x0) 03:42:53 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x10000000}, 0x0) 03:42:53 executing program 2: setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b41, 0x0) 03:42:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x4b34, 0x0) 03:42:53 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:53 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 773.713476][T19230] Bluetooth: hci6: command 0x1003 tx timeout [ 773.713692][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:53 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x11000000}, 0x0) 03:42:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x4b34, 0x0) [ 773.769891][T23472] loop1: detected capacity change from 0 to 264192 [ 773.781741][T23472] squashfs image failed sanity check 03:42:53 executing program 2: setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b41, 0x0) 03:42:53 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x15000000}, 0x0) 03:42:53 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x4b34, 0x0) [ 773.896281][T23485] loop1: detected capacity change from 0 to 264192 [ 773.921227][T23485] squashfs image failed sanity check 03:42:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) ioctl$KDADDIO(r10, 0x400455c8, 0x5) 03:42:55 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 03:42:55 executing program 2: setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b41, 0x0) 03:42:55 executing program 0: setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b34, 0x0) 03:42:55 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000009000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1f000000}, 0x0) [ 775.873799][T19230] Bluetooth: hci6: command 0x1003 tx timeout [ 775.883814][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:42:55 executing program 0: setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b34, 0x0) 03:42:55 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b41, 0x0) 03:42:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x30750000}, 0x0) [ 775.943264][T23496] loop1: detected capacity change from 0 to 264192 03:42:55 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) (async) ioctl$KDADDIO(r10, 0x400455c8, 0x5) 03:42:55 executing program 0: setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b34, 0x0) [ 776.020670][T23496] squashfs image failed sanity check 03:42:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x34000000}, 0x0) [ 776.118406][T23512] loop1: detected capacity change from 0 to 264192 [ 776.162027][T23512] squashfs image failed sanity check 03:42:56 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 03:42:56 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b41, 0x0) 03:42:56 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b34, 0x0) 03:42:56 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x40000000}, 0x0) 03:42:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) (async) ioctl$KDADDIO(r10, 0x400455c8, 0x5) 03:42:56 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00f30f000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:56 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b41, 0x0) 03:42:56 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b34, 0x0) 03:42:56 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x40020000}, 0x0) [ 776.798033][T23528] loop1: detected capacity change from 0 to 264192 03:42:56 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(0xffffffffffffffff, 0x4b34, 0x0) 03:42:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setreuid(0xee01, 0xee00) ioctl$TCGETA(r0, 0x4b65, 0x0) [ 776.858547][T23528] squashfs image failed sanity check 03:42:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x80009) 03:42:57 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x15000000}, 0x0) 03:42:57 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:57 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4c1d0000}, 0x0) 03:42:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:42:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}], 0x0, &(0x7f00000003c0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 03:42:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x80009) 03:42:57 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x983a0000}, 0x0) [ 777.731278][T23556] loop2: detected capacity change from 0 to 4 [ 777.736705][T23557] loop1: detected capacity change from 0 to 264192 [ 777.747527][T23556] EXT4-fs: quotafile must be on filesystem root 03:42:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x80009) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x80009) (async) [ 777.777788][T23557] squashfs image failed sanity check 03:42:57 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 03:42:57 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xe8030000}, 0x0) [ 777.854483][T23565] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 777.887752][T23572] loop1: detected capacity change from 0 to 264192 03:42:57 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 777.900320][T23572] squashfs image failed sanity check 03:42:58 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) 03:42:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}}, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e24, 0xc8e1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 03:42:58 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xf4010000}, 0x0) 03:42:58 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:42:58 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:42:58 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:42:58 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 778.641611][T23586] loop1: detected capacity change from 0 to 264192 [ 778.690332][T23586] squashfs image failed sanity check 03:42:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}}, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e24, 0xc8e1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}}, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e24, 0xc8e1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) (async) 03:42:58 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x8000000000}, 0x0) 03:42:58 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:58 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 778.812884][T23605] loop1: detected capacity change from 0 to 264192 [ 778.837294][T23605] squashfs image failed sanity check 03:42:59 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x34000000}, 0x0) 03:42:59 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x2000000000000}, 0x0) 03:42:59 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:42:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}}, 0x0) (async, rerun: 64) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) (async, rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e24, 0xc8e1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 03:42:59 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0001fe000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:42:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:42:59 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:42:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x100, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d661a015c955c72fc74dfa839d80a2c80efbd6e4d2b44936"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e1870c8e9805d84ba12bc7cdb41e1638dde2fcc0d42f3fd5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4452d752483362cbcb1c220f4bb51bac5e26544cf57a459b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d425ab994e4908de684d23f230b8aa3790cc7100695a0f83"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40044}, 0x408c2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000801) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x40, 0x4000}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x100000001) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) 03:42:59 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x14280000000000}, 0x0) [ 779.543079][T23639] loop1: detected capacity change from 0 to 264192 [ 779.602173][T23639] squashfs image failed sanity check 03:42:59 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:42:59 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x40000000000000}, 0x0) 03:42:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x100, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d661a015c955c72fc74dfa839d80a2c80efbd6e4d2b44936"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e1870c8e9805d84ba12bc7cdb41e1638dde2fcc0d42f3fd5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4452d752483362cbcb1c220f4bb51bac5e26544cf57a459b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d425ab994e4908de684d23f230b8aa3790cc7100695a0f83"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40044}, 0x408c2) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000801) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x40, 0x4000}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async, rerun: 32) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x100000001) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) 03:43:00 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 03:43:00 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:00 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x80000000000000}, 0x0) 03:43:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x100, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d661a015c955c72fc74dfa839d80a2c80efbd6e4d2b44936"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e1870c8e9805d84ba12bc7cdb41e1638dde2fcc0d42f3fd5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4452d752483362cbcb1c220f4bb51bac5e26544cf57a459b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d425ab994e4908de684d23f230b8aa3790cc7100695a0f83"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40044}, 0x408c2) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000801) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x40, 0x4000}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (rerun: 64) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x100000001) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) 03:43:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:43:00 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 780.483022][T23669] loop1: detected capacity change from 0 to 264192 03:43:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 780.530093][T23669] squashfs image failed sanity check 03:43:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:43:00 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:00 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 780.650489][T23688] loop1: detected capacity change from 0 to 264192 [ 780.664660][T23688] squashfs image failed sanity check 03:43:00 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x40020000}, 0x0) 03:43:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:43:00 executing program 2: r0 = socket(0x2b, 0x1, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:00 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:01 executing program 2: r0 = socket(0x2b, 0x1, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:01 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:43:01 executing program 2: r0 = socket(0x2b, 0x1, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 781.386473][T23694] loop1: detected capacity change from 0 to 264192 [ 781.413822][T23694] squashfs image failed sanity check 03:43:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:02 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:43:02 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:02 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:02 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xe8030000}, 0x0) [ 782.593611][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 782.597986][T21378] Bluetooth: hci6: command 0x1003 tx timeout 03:43:02 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:02 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 782.665228][T23719] loop1: detected capacity change from 0 to 264192 [ 782.693555][T23719] squashfs image failed sanity check 03:43:02 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:02 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:02 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xa00000000000000}, 0x0) 03:43:02 executing program 2: r0 = socket(0x0, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 782.798138][T23727] loop1: detected capacity change from 0 to 264192 [ 782.827229][T23727] squashfs image failed sanity check 03:43:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1800, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:43:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xe00000000000000}, 0x0) 03:43:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:04 executing program 2: r0 = socket(0x0, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:04 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xf4010000}, 0x0) [ 784.753442][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 784.753605][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 784.815461][T23745] loop1: detected capacity change from 0 to 264192 [ 784.855277][T23745] squashfs image failed sanity check 03:43:04 executing program 2: r0 = socket(0x0, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1000000000000000}, 0x0) 03:43:04 executing program 2: r0 = socket(0x2b, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 784.961474][T23759] loop1: detected capacity change from 0 to 264192 [ 784.991324][T23759] squashfs image failed sanity check 03:43:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 785.091927][T23765] loop1: detected capacity change from 0 to 264192 [ 785.109689][T23765] squashfs image failed sanity check 03:43:06 executing program 4: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDADDIO(r6, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) 03:43:06 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1100000000000000}, 0x0) 03:43:06 executing program 2: r0 = socket(0x2b, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:06 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:06 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 786.913578][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 786.913665][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:06 executing program 2: r0 = socket(0x2b, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 786.972844][T23773] loop1: detected capacity change from 0 to 264192 03:43:06 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1500000000000000}, 0x0) 03:43:06 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 787.039483][T23773] squashfs image failed sanity check 03:43:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:06 executing program 4: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDADDIO(r6, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) (async) 03:43:06 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x1f00000000000000}, 0x0) 03:43:06 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:06 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:06 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 787.206434][T23808] loop1: detected capacity change from 0 to 264192 [ 787.249714][T23808] squashfs image failed sanity check 03:43:07 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x2) 03:43:07 executing program 4: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDADDIO(r6, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) 03:43:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3075000000000000}, 0x0) 03:43:07 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, 0x0, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:07 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00100b000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:07 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, 0x0, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x3400000000000000}, 0x0) [ 787.840635][T23821] loop1: detected capacity change from 0 to 264192 03:43:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4000000000000000}, 0x0) 03:43:07 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, 0x0, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 787.902160][T23821] squashfs image failed sanity check 03:43:07 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:07 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 788.040667][T23836] loop1: detected capacity change from 0 to 264192 03:43:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 788.113298][T23836] squashfs image failed sanity check 03:43:08 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x3) 03:43:08 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4002000000000000}, 0x0) 03:43:08 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:08 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00100d000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x0, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c89bcf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d363ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f7dbf46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e8526c2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x692aa4d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000081}, 0x20040010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0xa099276e830ee64f, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000040)={0x0, 0xfffffefb, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r10, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x50}, 0x6, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x54, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000845) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r11, 0x400455c8, 0x100000001) 03:43:08 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 788.732739][T23847] loop1: detected capacity change from 0 to 264192 [ 788.764420][T23847] squashfs image failed sanity check 03:43:08 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x4c1d000000000000}, 0x0) 03:43:08 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:08 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:08 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x983a000000000000}, 0x0) [ 788.797459][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 788.817223][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x0, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c89bcf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d363ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f7dbf46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e8526c2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x692aa4d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000081}, 0x20040010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0xa099276e830ee64f, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000040)={0x0, 0xfffffefb, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r10, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x50}, 0x6, 0x700000000000000}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x54, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000845) (async) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r11, 0x400455c8, 0x100000001) [ 788.912360][T23864] loop1: detected capacity change from 0 to 264192 [ 788.948085][T23864] squashfs image failed sanity check 03:43:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:09 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:09 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xe803000000000000}, 0x0) 03:43:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x0, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c89bcf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d363ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f7dbf46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e8526c2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x692aa4d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000081}, 0x20040010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0xa099276e830ee64f, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000040)={0x0, 0xfffffefb, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r10, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x50}, 0x6, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x54, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000845) (async) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r11, 0x400455c8, 0x100000001) 03:43:09 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x4) 03:43:09 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:09 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:09 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xf401000000000000}, 0x0) 03:43:09 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 789.633763][T23875] loop1: detected capacity change from 0 to 264192 [ 789.662779][T23875] squashfs image failed sanity check 03:43:09 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:43:09 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:09 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:09 executing program 0: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{}], 0x1, 0xfff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:09 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 03:43:09 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 789.786408][T23892] loop1: detected capacity change from 0 to 264192 [ 789.810435][T23892] squashfs image failed sanity check 03:43:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:11 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001011000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:11 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:11 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x0) 03:43:11 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x7) 03:43:11 executing program 0: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{}], 0x1, 0xfff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 791.713438][T19230] Bluetooth: hci6: command 0x1003 tx timeout [ 791.713553][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:11 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:43:11 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 791.793081][T23904] loop1: detected capacity change from 0 to 264192 [ 791.828619][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 791.835934][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 791.869362][T23904] squashfs image failed sanity check 03:43:11 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:11 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:43:11 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 791.959205][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 791.972691][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:11 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 792.046962][T23928] loop1: detected capacity change from 0 to 264192 03:43:11 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:43:11 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 792.092475][T23928] squashfs image failed sanity check 03:43:12 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x8) 03:43:12 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:12 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:43:12 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:12 executing program 0: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{}], 0x1, 0xfff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:12 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:12 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 792.653950][T23940] loop1: detected capacity change from 0 to 264192 [ 792.706253][T23940] squashfs image failed sanity check 03:43:12 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:12 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 792.835042][T23957] loop1: detected capacity change from 0 to 264192 [ 792.845586][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 792.862082][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 792.880449][ T2976] loop1: unable to read partition table [ 792.887339][T23957] squashfs image failed sanity check 03:43:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0xfffffffffffffffd, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x17) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3f, 0x6, 0x36, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x10, 0x20, 0xffff9e06, 0x20}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4400040}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x80, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x88c0}, 0xc005) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:13 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xa}, 0x0) 03:43:13 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:13 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:13 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xa) [ 794.113433][T19230] Bluetooth: hci6: command 0x1003 tx timeout [ 794.113694][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 794.150108][T23964] loop1: detected capacity change from 0 to 264192 [ 794.162174][T23964] squashfs image failed sanity check 03:43:13 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:13 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xe}, 0x0) 03:43:13 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001016000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0xfffffffffffffffd, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x17) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3f, 0x6, 0x36, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x10, 0x20, 0xffff9e06, 0x20}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4400040}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x80, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x88c0}, 0xc005) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 794.244058][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 794.251188][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 794.265788][T23973] loop1: detected capacity change from 0 to 264192 [ 794.275375][T23973] squashfs image failed sanity check 03:43:13 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:13 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) 03:43:13 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:43:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0xfffffffffffffffd, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x17) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3f, 0x6, 0x36, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x10, 0x20, 0xffff9e06, 0x20}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4400040}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x80, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x88c0}, 0xc005) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0xfffffffffffffffd, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x17) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3f, 0x6, 0x36, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x10, 0x20, 0xffff9e06, 0x20}}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4400040}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x80, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x88c0}, 0xc005) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:43:14 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newchain={0x24}, 0x24}}, 0x0) [ 794.381924][T23986] loop1: detected capacity change from 0 to 264192 [ 794.427340][T23986] squashfs image failed sanity check 03:43:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 794.505993][T24007] loop1: detected capacity change from 0 to 264192 [ 794.517587][T24007] squashfs image failed sanity check 03:43:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:14 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xe) 03:43:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:43:14 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, 0x0, 0x0) 03:43:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:14 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, 0x0, 0x0) 03:43:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x11}, 0x0) 03:43:14 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 795.021823][T24011] loop1: detected capacity change from 0 to 264192 [ 795.048497][T24011] squashfs image failed sanity check 03:43:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 795.146926][T24027] loop1: detected capacity change from 0 to 264192 [ 795.158789][T24027] squashfs image failed sanity check 03:43:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:16 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:43:16 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x15}, 0x0) 03:43:16 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00101b000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:16 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xf) [ 796.513483][T21379] Bluetooth: hci6: command 0x1003 tx timeout [ 796.513702][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:16 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 796.571727][T24032] loop1: detected capacity change from 0 to 264192 [ 796.579415][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 796.586847][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:43:16 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x34}, 0x0) 03:43:16 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 796.668477][T24032] squashfs image failed sanity check 03:43:16 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:16 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x1f4}, 0x0) 03:43:16 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:43:16 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x240}, 0x0) 03:43:16 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 796.782348][T24053] loop1: detected capacity change from 0 to 264192 [ 796.814256][T24053] squashfs image failed sanity check 03:43:16 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001048000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 796.904970][T24063] loop1: detected capacity change from 0 to 264192 [ 796.913315][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 796.930661][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 796.939554][ T2976] loop1: unable to read partition table [ 796.947011][T24063] squashfs image failed sanity check 03:43:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:17 executing program 2: r0 = socket(0x2b, 0x1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood\x00', 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:43:17 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:43:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:43:18 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00104c000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:18 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x10) 03:43:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x15, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x100, 0x100, 0x210, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'macsec0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 03:43:18 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x3e8}, 0x0) 03:43:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 798.673809][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:18 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) 03:43:18 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 798.717622][T24077] loop1: detected capacity change from 0 to 264192 [ 798.741218][T24077] squashfs image failed sanity check 03:43:18 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001060000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x55d4, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:43:18 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:43:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 798.841715][T24093] loop1: detected capacity change from 0 to 264192 [ 798.850629][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.860846][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 798.877107][ T2976] loop1: unable to read partition table [ 798.884322][T24093] squashfs image failed sanity check 03:43:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1c) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:20 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 03:43:20 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001068000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 03:43:20 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x11) 03:43:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 800.833528][T21379] Bluetooth: hci6: command 0x1003 tx timeout [ 800.844166][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000057c0)={0x0, 0x0, 0x0}, 0x0) 03:43:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1c) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:20 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 800.910115][T24116] loop1: detected capacity change from 0 to 264192 03:43:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 03:43:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1c) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 800.962759][T24116] squashfs image failed sanity check 03:43:20 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:20 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 03:43:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000005480)={'sit0\x00', 0x0}) 03:43:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x250800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:43:20 executing program 2: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x3, &(0x7f00000031c0)=[{&(0x7f0000001c80)='R', 0x1, 0x9}, {&(0x7f0000001e80)='Z\b', 0x2, 0xfff}, {&(0x7f0000001fc0)="9a5d10c3e474ceb3e2b2aeb5f3d9135eac215f533582aae02d4d1e60f422ab4de201a7f5df00d0de542fb20529a59e364008b474d0fcbd5b3029f7f08229795646", 0x41}], 0x0, &(0x7f00000032c0)) [ 801.060658][T24132] loop1: detected capacity change from 0 to 264192 [ 801.070975][T24132] squashfs image failed sanity check [ 801.132743][T24139] loop2: detected capacity change from 0 to 15 [ 801.142322][ T2976] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 801.154312][ T2976] Buffer I/O error on dev loop2, logical block 0, async page read [ 801.162448][ T2976] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 801.173264][ T2976] Buffer I/O error on dev loop2, logical block 0, async page read [ 801.182555][ T2976] Dev loop2: unable to read RDB block 15 [ 801.188416][ T2976] loop2: unable to read partition table [ 801.194611][ T2976] loop2: partition table beyond EOD, truncated 03:43:21 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x15) 03:43:21 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:21 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x1500}, 0x0) 03:43:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x250800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x250800, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) 03:43:21 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x0) 03:43:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(0x0, 0x0, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:21 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x105e80, 0x0) [ 801.754199][T24145] loop1: detected capacity change from 0 to 264192 03:43:21 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x1d4c}, 0x0) [ 801.805778][T24145] squashfs image failed sanity check 03:43:21 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x250800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:43:21 executing program 2: mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x3) [ 801.879877][T24165] loop1: detected capacity change from 0 to 264192 [ 801.891745][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 801.914088][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read 03:43:21 executing program 2: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) [ 801.936569][ T2976] loop1: unable to read partition table [ 801.952817][T24165] squashfs image failed sanity check 03:43:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) finit_module(r0, &(0x7f0000000000)='/dev/ptmx\x00', 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x100000001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x800, 0x1, 0x6, 0x2, 0x15, "4fd6f6237ccd058c"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x10) 03:43:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) 03:43:22 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:22 executing program 2: pipe2$9p(&(0x7f00000032c0), 0x0) 03:43:22 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x34) 03:43:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(0x0, 0x0, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 03:43:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x3075}, 0x0) [ 802.657418][T24185] loop1: detected capacity change from 0 to 264192 [ 802.674842][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 802.682754][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 802.698053][T24185] squashfs image failed sanity check 03:43:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 03:43:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) finit_module(r0, &(0x7f0000000000)='/dev/ptmx\x00', 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x100000001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x800, 0x1, 0x6, 0x2, 0x15, "4fd6f6237ccd058c"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) finit_module(r0, &(0x7f0000000000)='/dev/ptmx\x00', 0x2) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x100000001) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) (async) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x800, 0x1, 0x6, 0x2, 0x15, "4fd6f6237ccd058c"}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x10) (async) 03:43:22 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x3400}, 0x0) 03:43:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000025c0), 0x0, 0x0) [ 802.864417][T24207] loop1: detected capacity change from 0 to 264192 03:43:22 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x3a98}, 0x0) 03:43:22 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1ad001, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) [ 802.919965][T24207] squashfs image failed sanity check 03:43:22 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 803.021441][T24217] loop1: detected capacity change from 0 to 264192 [ 803.022255][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 803.037375][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 803.046298][ T2976] loop1: unable to read partition table [ 803.053081][T24217] squashfs image failed sanity check 03:43:23 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x1f4) 03:43:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:23 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:43:23 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000060000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(0x0, 0x0, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 803.570439][T24223] loop1: detected capacity change from 0 to 264192 [ 803.596221][T24223] squashfs image failed sanity check 03:43:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) finit_module(r0, &(0x7f0000000000)='/dev/ptmx\x00', 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x100000001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x800, 0x1, 0x6, 0x2, 0x15, "4fd6f6237ccd058c"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) finit_module(r0, &(0x7f0000000000)='/dev/ptmx\x00', 0x2) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x100000001) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) (async) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x800, 0x1, 0x6, 0x2, 0x15, "4fd6f6237ccd058c"}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x10) (async) 03:43:24 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x4002}, 0x0) 03:43:24 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:24 executing program 2: select(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 03:43:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400), 0x0, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:24 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x240) 03:43:24 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x4c1d}, 0x0) [ 804.833535][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 804.840151][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:24 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x2000, 0x0) [ 804.904939][T24240] loop1: detected capacity change from 0 to 264192 [ 804.945486][T24240] squashfs image failed sanity check 03:43:24 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000002000), 0x301, 0x0) 03:43:24 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000090000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:24 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000), 0x4) 03:43:24 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x7530}, 0x0) [ 805.063784][T24259] loop1: detected capacity change from 0 to 264192 [ 805.085744][T24259] squashfs image failed sanity check 03:43:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0000006400040b28bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4044080) sendto$packet(r1, &(0x7f0000000280), 0x0, 0x404c801, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) 03:43:26 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x983a}, 0x0) 03:43:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x200, 0x0) getdents(r0, 0x0, 0x0) 03:43:26 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400), 0x0, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:26 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x300) [ 806.993599][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 807.001296][T21379] Bluetooth: hci6: command tx timeout 03:43:26 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) fcntl$lock(r1, 0x8, 0x0) [ 807.041218][T24274] loop1: detected capacity change from 0 to 264192 [ 807.057931][T24274] squashfs image failed sanity check [ 807.061256][T24273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:26 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xe803}, 0x0) 03:43:26 executing program 2: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0) 03:43:26 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010000b0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 807.108133][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 807.115597][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:26 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xf401}, 0x0) 03:43:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0000006400040b28bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4044080) (async) sendto$packet(r1, &(0x7f0000000280), 0x0, 0x404c801, 0x0, 0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) 03:43:26 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x0) 03:43:26 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 03:43:26 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080), 0x8) [ 807.196272][T24287] loop1: detected capacity change from 0 to 264192 [ 807.222166][T24287] squashfs image failed sanity check 03:43:26 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 807.310828][T24297] loop1: detected capacity change from 0 to 264192 [ 807.348433][T24297] squashfs image failed sanity check 03:43:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400), 0x0, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:27 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x3e8) 03:43:27 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x142800}, 0x0) 03:43:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6, 0x101, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 03:43:27 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0000006400040b28bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4044080) sendto$packet(r1, &(0x7f0000000280), 0x0, 0x404c801, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x100000001) [ 807.875317][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.881637][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 03:43:27 executing program 2: socketpair(0x11, 0x0, 0x200, &(0x7f0000000080)) [ 807.929164][T24307] loop1: detected capacity change from 0 to 264192 [ 807.951573][T24313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:27 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x281400}, 0x0) 03:43:27 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x400000}, 0x0) 03:43:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001380)=""/254, 0x2a, 0xfe, 0x1}, 0x20) 03:43:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x942c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 807.984823][T24310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 808.005162][T24307] squashfs image failed sanity check 03:43:27 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010730c0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 808.113280][T24328] loop1: detected capacity change from 0 to 264192 [ 808.128014][T24328] squashfs image failed sanity check 03:43:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:28 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x700) 03:43:28 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x800000}, 0x0) 03:43:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x942c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:28 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f00)={&(0x7f0000000ec0)='./file0/file0\x00'}, 0x10) 03:43:28 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010000d0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x942c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:28 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440), 0xc) 03:43:28 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 808.802611][T24336] loop1: detected capacity change from 0 to 264192 [ 808.828949][T24336] squashfs image failed sanity check 03:43:28 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x100000001) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) 03:43:28 executing program 2: bpf$OBJ_GET_MAP(0x16, &(0x7f0000000040)={0x0, 0x0, 0x30}, 0x10) [ 808.954325][T24353] loop1: detected capacity change from 0 to 264192 [ 808.986246][T24353] squashfs image failed sanity check 03:43:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:29 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xa00) 03:43:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 03:43:29 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:43:29 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:29 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS2(r0, 0x5441, 0x0) 03:43:29 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 809.726541][T24363] loop1: detected capacity change from 0 to 264192 03:43:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x5f}}, 0x0) [ 809.780629][T24363] squashfs image failed sanity check 03:43:29 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:43:29 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010b20e0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 809.880506][T24377] loop1: detected capacity change from 0 to 264192 [ 809.903030][T24377] squashfs image failed sanity check 03:43:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x100000001) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) (async) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000080)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x100000001) (async) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) (async) 03:43:30 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:43:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) 03:43:30 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:30 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xe00) [ 810.994158][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 811.049098][T24388] loop1: detected capacity change from 0 to 264192 [ 811.069543][T24388] squashfs image failed sanity check 03:43:30 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 03:43:30 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010b40e0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:30 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) 03:43:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}}, 0x0) 03:43:30 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 811.152433][T24401] loop1: detected capacity change from 0 to 264192 [ 811.171520][T24401] squashfs image failed sanity check 03:43:30 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 811.258374][T24411] loop1: detected capacity change from 0 to 264192 [ 811.277326][T24411] squashfs image failed sanity check 03:43:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x100000001) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) (async) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000080)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x100000001) (async) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) (async) 03:43:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0xd0) 03:43:32 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 03:43:32 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:32 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xf00) 03:43:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 813.153598][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 813.153716][ T3686] Bluetooth: hci6: command 0x1003 tx timeout 03:43:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) [ 813.208319][T24421] loop1: detected capacity change from 0 to 264192 03:43:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:32 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 813.257066][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 813.264527][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 813.287060][T24421] squashfs image failed sanity check 03:43:32 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000110000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x90aa8da800b3d645, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) syz_open_pts(r0, 0x14100) 03:43:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x90aa8da800b3d645, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) syz_open_pts(r0, 0x14100) [ 813.393236][T24442] loop1: detected capacity change from 0 to 264192 [ 813.441289][T24442] squashfs image failed sanity check 03:43:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0xfb2, 0xfffffffa}, 0x48) 03:43:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x90aa8da800b3d645, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) syz_open_pts(r0, 0x14100) 03:43:33 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 03:43:33 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x1100) 03:43:33 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x100100000001) 03:43:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf}, 0x48) [ 814.067598][T24459] loop1: detected capacity change from 0 to 264192 [ 814.103993][T24459] squashfs image failed sanity check 03:43:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:33 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 03:43:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0xfb2, 0x401, 0x10}, 0x48) 03:43:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x100100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1a) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100100000001) (async) 03:43:33 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:33 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x15000000}, 0x0) [ 814.241300][T24477] loop1: detected capacity change from 0 to 264192 03:43:33 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 03:43:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1a) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x100100000001) [ 814.288498][T24477] squashfs image failed sanity check 03:43:34 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x1500) 03:43:34 executing program 2: r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 03:43:34 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:34 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) [ 814.967830][T24519] loop1: detected capacity change from 0 to 264192 [ 814.996407][T24519] squashfs image failed sanity check 03:43:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c4c3e12b4007159c49dc9fc60f96fe13eaa36"}) 03:43:34 executing program 2: r0 = socket(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8935, &(0x7f0000000000)={'wg1\x00'}) 03:43:34 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x30750000}, 0x0) 03:43:34 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) 03:43:34 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x34000000}, 0x0) 03:43:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x505241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x8801) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x20) [ 815.151351][T24534] loop1: detected capacity change from 0 to 264192 03:43:34 executing program 2: r0 = socket(0x2, 0x2, 0x1) bind$packet(r0, 0x0, 0x0) [ 815.208300][T24534] squashfs image failed sanity check 03:43:35 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x1f00) 03:43:35 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 03:43:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x505241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x8801) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x20) 03:43:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001004050700000000000000000000000072c6c649a2309d3c440de891ba6248a9d3772ba3ba11eec6033e4ee2f7af70a63958c7700bbd0b8465644d89f2a9420a4c3a918de02e451bb651a097641fc4149298f411307b6615c813b33387a324561eae9049062dde3a3e4db073ae3a58173ee5b942c262fd03a046c195e3d9a8ac7a9c08faa2b22a80a66801f7b7f07db2bae21ed5e59c77917fd1da6f2ac7536754da0d557bd0ca9236b837e21b9e087d5a096f72c266e31dc9b7a5beb51d5b447269a0eccd1d95b883db704516f33965aa2cd0705aca739b0a7663ebc51b322dddd764d0915cffe268640fc778668178bcc59a84", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8100}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}]}}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0xcf, 0x1f, 0x6, 0x50, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x80000000, 0x13, @remote, @remote, 0x806f, 0x80, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="32002cbd7000fbdbdf25190000003000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265746170300000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008130100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c00018008000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000"], 0x98}, 0x1, 0x0, 0x0, 0x20008800}, 0x4001) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r5 = memfd_create(&(0x7f0000000100)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r5, &(0x7f0000000080)=0x20000100000094, 0x8) write(r5, &(0x7f0000000040)="0600", 0x2) sendfile(r5, r5, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{0x0, 0x87}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) 03:43:35 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) 03:43:35 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x40020000}, 0x0) [ 815.971737][T24555] loop1: detected capacity change from 0 to 264192 [ 816.008030][T24555] squashfs image failed sanity check 03:43:35 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000170000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:35 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x4c1d0000}, 0x0) 03:43:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x505241, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x8801) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x20) [ 816.209550][T24568] loop1: detected capacity change from 0 to 264192 03:43:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) read(r0, &(0x7f0000000000)=""/7, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x83370000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x2f) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 816.266542][T24568] squashfs image failed sanity check 03:43:35 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0x983a0000}, 0x0) [ 816.390382][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 816.398498][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:36 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x3400) 03:43:36 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) read(r0, &(0x7f0000000000)=""/7, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x83370000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x2f) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) read(r0, &(0x7f0000000000)=""/7, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x83370000) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x2f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:43:36 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xe8030000}, 0x0) 03:43:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001004050700000000000000000000000072c6c649a2309d3c440de891ba6248a9d3772ba3ba11eec6033e4ee2f7af70a63958c7700bbd0b8465644d89f2a9420a4c3a918de02e451bb651a097641fc4149298f411307b6615c813b33387a324561eae9049062dde3a3e4db073ae3a58173ee5b942c262fd03a046c195e3d9a8ac7a9c08faa2b22a80a66801f7b7f07db2bae21ed5e59c77917fd1da6f2ac7536754da0d557bd0ca9236b837e21b9e087d5a096f72c266e31dc9b7a5beb51d5b447269a0eccd1d95b883db704516f33965aa2cd0705aca739b0a7663ebc51b322dddd764d0915cffe268640fc778668178bcc59a84", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8100}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}]}}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0xcf, 0x1f, 0x6, 0x50, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x80000000, 0x13, @remote, @remote, 0x806f, 0x80, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="32002cbd7000fbdbdf25190000003000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265746170300000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008130100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c00018008000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000"], 0x98}, 0x1, 0x0, 0x0, 0x20008800}, 0x4001) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r5 = memfd_create(&(0x7f0000000100)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r5, &(0x7f0000000080)=0x20000100000094, 0x8) write(r5, &(0x7f0000000040)="0600", 0x2) sendfile(r5, r5, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{0x0, 0x87}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) 03:43:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) [ 816.801696][T24584] loop1: detected capacity change from 0 to 264192 03:43:36 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xf4010000}, 0x0) [ 816.851200][T24584] squashfs image failed sanity check 03:43:36 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:36 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 816.989321][T24608] loop1: detected capacity change from 0 to 264192 [ 817.026084][T24608] squashfs image failed sanity check 03:43:36 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x2) 03:43:36 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:36 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3) [ 817.142096][T24616] loop1: detected capacity change from 0 to 264192 [ 817.142451][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 817.198477][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 817.231872][ T2976] loop1: unable to read partition table [ 817.246652][T24616] squashfs image failed sanity check 03:43:37 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4) 03:43:37 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 817.673730][T24622] loop1: detected capacity change from 0 to 264192 [ 817.743708][T24622] squashfs image failed sanity check 03:43:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) read(r0, &(0x7f0000000000)=""/7, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x83370000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x2f) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) read(r0, &(0x7f0000000000)=""/7, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x83370000) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x2f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:43:38 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x4000) 03:43:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000001c0)=0x13) poll(&(0x7f0000000400)=[{r0}], 0x1, 0xfff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) 03:43:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x7) 03:43:38 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001004050700000000000000000000000072c6c649a2309d3c440de891ba6248a9d3772ba3ba11eec6033e4ee2f7af70a63958c7700bbd0b8465644d89f2a9420a4c3a918de02e451bb651a097641fc4149298f411307b6615c813b33387a324561eae9049062dde3a3e4db073ae3a58173ee5b942c262fd03a046c195e3d9a8ac7a9c08faa2b22a80a66801f7b7f07db2bae21ed5e59c77917fd1da6f2ac7536754da0d557bd0ca9236b837e21b9e087d5a096f72c266e31dc9b7a5beb51d5b447269a0eccd1d95b883db704516f33965aa2cd0705aca739b0a7663ebc51b322dddd764d0915cffe268640fc778668178bcc59a84", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8100}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}]}}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0xcf, 0x1f, 0x6, 0x50, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x80000000, 0x13, @remote, @remote, 0x806f, 0x80, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="32002cbd7000fbdbdf25190000003000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265746170300000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008130100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c00018008000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000"], 0x98}, 0x1, 0x0, 0x0, 0x20008800}, 0x4001) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r5 = memfd_create(&(0x7f0000000100)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r5, &(0x7f0000000080)=0x20000100000094, 0x8) write(r5, &(0x7f0000000040)="0600", 0x2) sendfile(r5, r5, &(0x7f00000001c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{0x0, 0x87}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) [ 818.913615][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 818.921406][ T3686] Bluetooth: hci6: command tx timeout 03:43:38 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 818.970312][T24634] loop1: detected capacity change from 0 to 264192 [ 818.987722][T24634] squashfs image failed sanity check [ 818.998064][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 819.005727][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x8) 03:43:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xa) 03:43:38 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x5) 03:43:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xe) [ 819.153791][T24655] loop1: detected capacity change from 0 to 264192 03:43:38 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x5) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x5) (async) [ 819.234022][T24655] squashfs image failed sanity check 03:43:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf) [ 819.363014][T24665] ptm ptm1: ldisc open failed (-12), clearing slot 1 03:43:39 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x5) 03:43:39 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x4002) 03:43:39 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x10) 03:43:39 executing program 0: bpf$MAP_CREATE(0x1e, &(0x7f0000000d40), 0x48) 03:43:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 03:43:39 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) dup3(r0, r1, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000)) 03:43:39 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x11) 03:43:39 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) [ 819.867761][T24676] loop1: detected capacity change from 0 to 264192 [ 819.899018][T24676] squashfs image failed sanity check [ 819.934353][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 819.941764][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:39 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:39 executing program 2: request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)=':-\xa2]\x00', 0xfffffffffffffffd) 03:43:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) dup3(r0, r1, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) dup3(r0, r1, 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000)) (async) 03:43:39 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x15) [ 820.069035][T24692] loop1: detected capacity change from 0 to 264192 [ 820.116222][ T3647] Bluetooth: hci6: sending frame failed (-49) [ 820.123999][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 820.126728][T24692] squashfs image failed sanity check 03:43:40 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xe803) 03:43:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x0, 0x5, 0x0, 0x7}}) 03:43:40 executing program 2: socket(0x1d, 0x0, 0x161f) 03:43:40 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x34) 03:43:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) dup3(r0, r1, 0x80000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000)) 03:43:40 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:40 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40000040) 03:43:40 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 03:43:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 820.747125][T24717] loop1: detected capacity change from 0 to 264192 [ 820.754883][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 820.762877][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:40 executing program 0: syz_mount_image$nfs(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:40 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1f4) 03:43:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast1, @dev}}) [ 820.817584][T24717] squashfs image failed sanity check 03:43:41 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xf401) 03:43:41 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x40, &(0x7f0000000000), 0x10) 03:43:41 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000400000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:41 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x240) 03:43:41 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x9) 03:43:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (rerun: 64) 03:43:41 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 03:43:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 821.629322][T24739] loop1: detected capacity change from 0 to 264192 03:43:41 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x300) [ 821.686586][T24739] squashfs image failed sanity check 03:43:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 03:43:41 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 821.808512][T24763] loop1: detected capacity change from 0 to 264192 [ 821.852330][T24763] squashfs image failed sanity check 03:43:42 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x20000) 03:43:42 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3e8) 03:43:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 03:43:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x14040, 0x0) 03:43:42 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010004c0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:42 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xfffffff9}, 0x8) 03:43:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 822.563928][T24768] loop1: detected capacity change from 0 to 264192 03:43:42 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x700) 03:43:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}]}, 0x28}}, 0x0) 03:43:42 executing program 0: select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x7}, &(0x7f0000000240)={0x0, 0xea60}) [ 822.609497][T24768] squashfs image failed sanity check 03:43:42 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_digitv', 0x610002, 0x0) 03:43:42 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 822.746637][T24788] loop1: detected capacity change from 0 to 264192 [ 822.775552][T24788] squashfs image failed sanity check 03:43:43 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x142800) 03:43:43 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xa00) 03:43:43 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000005a80), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0) 03:43:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x14040, 0x0) 03:43:44 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 03:43:44 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:44 executing program 0: clock_gettime(0x0, &(0x7f0000006580)) 03:43:44 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xe00) 03:43:44 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x281400) [ 824.593653][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 824.601437][T22811] Bluetooth: hci6: command tx timeout 03:43:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002080)={'gretap0\x00', 0x0}) 03:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_DPORT={0x6}]}, 0x1c}}, 0x0) [ 824.650303][T24802] loop1: detected capacity change from 0 to 264192 03:43:44 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf00) [ 824.700154][T24802] squashfs image failed sanity check 03:43:44 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 03:43:44 executing program 0: prctl$PR_SET_NAME(0x35, &(0x7f0000000000)='(L#-,&\\:+{&]\x00') 03:43:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x0, 0x0, @private0}, r1}}, 0x48) 03:43:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x14040, 0x0) 03:43:46 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:46 executing program 0: r0 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 03:43:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 03:43:46 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1100) 03:43:46 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x400000) [ 826.753567][ T3686] Bluetooth: hci6: command 0x1003 tx timeout [ 826.759690][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:46 executing program 0: r0 = socket(0x11, 0xa, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 03:43:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000001140)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0}}], 0x1, 0x0, 0x0) 03:43:46 executing program 2: openat$vsock(0xffffffffffffff9c, 0x0, 0x49e480, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) [ 826.813190][T24823] loop1: detected capacity change from 0 to 264192 03:43:46 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1500) [ 826.860951][T24823] squashfs image failed sanity check 03:43:46 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00100c730000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x119, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 826.965605][T24844] loop1: detected capacity change from 0 to 264192 [ 826.982720][T24844] squashfs image failed sanity check 03:43:48 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000007a2216db2a903fda92", @ANYRES32=r3, @ANYBLOB="0c009900450000005a0000000800db00", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r8, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$KDADDIO(r12, 0x400455c8, 0x100000005) 03:43:48 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1d4c) 03:43:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0285628, &(0x7f0000000000)={0x3, @output}) 03:43:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/232, 0xe8) tkill(r0, 0x7) 03:43:48 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000740000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:48 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x800000) [ 828.833666][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 828.839475][T21378] Bluetooth: hci6: command 0x1003 tx timeout 03:43:48 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1f00) 03:43:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 828.890670][T24853] loop1: detected capacity change from 0 to 264192 [ 828.909652][T24858] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:48 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0x81) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'veth0_to_team\x00'}) 03:43:48 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000007a2216db2a903fda92", @ANYRES32=r3, @ANYBLOB="0c009900450000005a0000000800db00", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r8, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$KDADDIO(r12, 0x400455c8, 0x100000005) [ 828.940753][T24853] squashfs image failed sanity check 03:43:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340)="5592f5a1d5f96188c4f13642f86580c71242d6fde507f2256b84ec166db5a006e81bad794e", 0x25, 0x640}, {&(0x7f0000010400)="030000001300000023000000", 0xc, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004", 0x3d, 0x8c80}, {0x0, 0x0, 0x8d00}, {0x0}], 0x0, &(0x7f0000013800)) getsockname$unix(r2, &(0x7f0000000400), &(0x7f0000000040)=0x6e) 03:43:48 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3075) 03:43:48 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x0, 0x9}) [ 829.019454][T24868] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:48 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3400) 03:43:48 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000007a2216db2a903fda92", @ANYRES32=r3, @ANYBLOB="0c009900450000005a0000000800db00", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r8, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$KDADDIO(r12, 0x400455c8, 0x100000005) 03:43:48 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0x9}) [ 829.080709][T24877] loop1: detected capacity change from 0 to 264192 [ 829.114237][T24877] squashfs image failed sanity check [ 829.127188][T24884] loop2: detected capacity change from 0 to 512 [ 829.180767][T24884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 829.190762][T24884] ext4 filesystem being mounted at /root/syzkaller-testdir1084731893/syzkaller.qYGGQD/1746/file0 supports timestamps until 2038 (0x7fffffff) [ 829.241093][T24886] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.277813][T24885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:49 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x1000000) 03:43:49 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3a98) 03:43:49 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000004204eb18a77d27bf654e4a06b7daa7fcd8693f0a9e4e3ca9a69504dbb813ea83c4e9037e3eafa649c938d0db18e3eda56bfb560016ff39b89c30926318dd422f4616d00f1ec46f798a00f4f8ca33e4fc93", @ANYRES16=r2, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0800010047a85e650000000800db00ddff6e144bc17405d07aaca4f58aaec4a3f0d886400b5172dda9a27e21b05392df3e9bcb3c7d45ef89f6b4015d2827033f761e108d8afb19b458344fe226fcd1b8569c871e360757a0d9570d6fe0bd9942141e69983b944a446bf1c9c74a5464e72b2ea4f5c3a54a443cf0c01ab358a7e760d2c5222946", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$xdp(0x2c, 0x3, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25020000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000300000000001400020070696d3672656700000000000000000008000300010000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="4c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653000000000000000000008000300000000006400018008000300000000001400020070696d367265673000000000000000001400020070696d3672656700000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480001801400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726530000000000000000000140002006261746164765f736c6176655f3100000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x20044800) 03:43:49 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4000) [ 829.756128][T24898] loop1: detected capacity change from 0 to 264192 [ 829.773667][T24896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.802854][T24898] squashfs image failed sanity check 03:43:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@delchain={0x24, 0x10, 0x9b19d3627866042b}, 0x24}}, 0x0) 03:43:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000004204eb18a77d27bf654e4a06b7daa7fcd8693f0a9e4e3ca9a69504dbb813ea83c4e9037e3eafa649c938d0db18e3eda56bfb560016ff39b89c30926318dd422f4616d00f1ec46f798a00f4f8ca33e4fc93", @ANYRES16=r2, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0800010047a85e650000000800db00ddff6e144bc17405d07aaca4f58aaec4a3f0d886400b5172dda9a27e21b05392df3e9bcb3c7d45ef89f6b4015d2827033f761e108d8afb19b458344fe226fcd1b8569c871e360757a0d9570d6fe0bd9942141e69983b944a446bf1c9c74a5464e72b2ea4f5c3a54a443cf0c01ab358a7e760d2c5222946", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$xdp(0x2c, 0x3, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25020000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000300000000001400020070696d3672656700000000000000000008000300010000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="4c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653000000000000000000008000300000000006400018008000300000000001400020070696d367265673000000000000000001400020070696d3672656700000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480001801400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726530000000000000000000140002006261746164765f736c6176655f3100000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x20044800) 03:43:49 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4002) 03:43:49 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 829.900479][ T3635] EXT4-fs (loop2): unmounting filesystem. [ 829.926692][T24910] loop1: detected capacity change from 0 to 264192 03:43:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000004204eb18a77d27bf654e4a06b7daa7fcd8693f0a9e4e3ca9a69504dbb813ea83c4e9037e3eafa649c938d0db18e3eda56bfb560016ff39b89c30926318dd422f4616d00f1ec46f798a00f4f8ca33e4fc93", @ANYRES16=r2, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0800010047a85e650000000800db00ddff6e144bc17405d07aaca4f58aaec4a3f0d886400b5172dda9a27e21b05392df3e9bcb3c7d45ef89f6b4015d2827033f761e108d8afb19b458344fe226fcd1b8569c871e360757a0d9570d6fe0bd9942141e69983b944a446bf1c9c74a5464e72b2ea4f5c3a54a443cf0c01ab358a7e760d2c5222946", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$xdp(0x2c, 0x3, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25020000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000300000000001400020070696d3672656700000000000000000008000300010000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="4c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653000000000000000000008000300000000006400018008000300000000001400020070696d367265673000000000000000001400020070696d3672656700000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480001801400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726530000000000000000000140002006261746164765f736c6176655f3100000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x20044800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000004204eb18a77d27bf654e4a06b7daa7fcd8693f0a9e4e3ca9a69504dbb813ea83c4e9037e3eafa649c938d0db18e3eda56bfb560016ff39b89c30926318dd422f4616d00f1ec46f798a00f4f8ca33e4fc93", @ANYRES16=r2, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="0800010047a85e650000000800db00ddff6e144bc17405d07aaca4f58aaec4a3f0d886400b5172dda9a27e21b05392df3e9bcb3c7d45ef89f6b4015d2827033f761e108d8afb19b458344fe226fcd1b8569c871e360757a0d9570d6fe0bd9942141e69983b944a446bf1c9c74a5464e72b2ea4f5c3a54a443cf0c01ab358a7e760d2c5222946", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x5}]}}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25020000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000300000000001400020070696d3672656700000000000000000008000300010000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="4c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653000000000000000000008000300000000006400018008000300000000001400020070696d367265673000000000000000001400020070696d3672656700000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480001801400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726530000000000000000000140002006261746164765f736c6176655f3100000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x20044800) (async) 03:43:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="c00000001000010028bd7000fddbdf25000000000c0002"], 0xc0}}, 0x0) 03:43:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x2, 0x32b9}, 0x48) [ 829.955006][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 829.993577][T24910] squashfs image failed sanity check [ 830.041029][T24915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 830.091490][T24917] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 830.136451][T24915] ptm ptm1: ldisc open failed (-12), clearing slot 1 03:43:50 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x2000000) 03:43:50 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4c1d) 03:43:50 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x2, 0x32b9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 03:43:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$KDADDIO(r5, 0x400455c8, 0x4000004) r6 = open_tree(r5, &(0x7f0000000000)='./file0\x00', 0x800) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x110, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "154d97db23cf6b867fd0ee2881076fc5ddd0b2b459c8304f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea64ec796034e49f3d2a23bb26d867f26f580c29a4417297"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d18b82189e57a91e3e1c157e455ed065508331732dc1c861"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5741deb49dffca421526e03b95fab18debb14667413be9f4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ccb23634f4f55ddf78b3c0458f1203edf983421cfbfc07d"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x2000000}, 0x48005) 03:43:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000002a000166"], 0xc0}}, 0x0) 03:43:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) [ 830.662163][T24926] loop1: detected capacity change from 0 to 264192 03:43:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x4000004) (async) r6 = open_tree(r5, &(0x7f0000000000)='./file0\x00', 0x800) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x110, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "154d97db23cf6b867fd0ee2881076fc5ddd0b2b459c8304f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea64ec796034e49f3d2a23bb26d867f26f580c29a4417297"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d18b82189e57a91e3e1c157e455ed065508331732dc1c861"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5741deb49dffca421526e03b95fab18debb14667413be9f4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ccb23634f4f55ddf78b3c0458f1203edf983421cfbfc07d"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x2000000}, 0x48005) 03:43:50 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x7530) [ 830.709881][T24926] squashfs image failed sanity check 03:43:50 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000003e00)={0x1, &(0x7f0000003dc0)=[{0x6}]}) 03:43:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$KDADDIO(r5, 0x400455c8, 0x4000004) r6 = open_tree(r5, &(0x7f0000000000)='./file0\x00', 0x800) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x110, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "154d97db23cf6b867fd0ee2881076fc5ddd0b2b459c8304f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea64ec796034e49f3d2a23bb26d867f26f580c29a4417297"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d18b82189e57a91e3e1c157e455ed065508331732dc1c861"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5741deb49dffca421526e03b95fab18debb14667413be9f4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ccb23634f4f55ddf78b3c0458f1203edf983421cfbfc07d"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x2000000}, 0x48005) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x4000004) (async) open_tree(r5, &(0x7f0000000000)='./file0\x00', 0x800) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x110, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "154d97db23cf6b867fd0ee2881076fc5ddd0b2b459c8304f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea64ec796034e49f3d2a23bb26d867f26f580c29a4417297"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d18b82189e57a91e3e1c157e455ed065508331732dc1c861"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5741deb49dffca421526e03b95fab18debb14667413be9f4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ccb23634f4f55ddf78b3c0458f1203edf983421cfbfc07d"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x2000000}, 0x48005) (async) [ 830.821858][T24944] loop1: detected capacity change from 0 to 264192 [ 830.867574][ T26] audit: type=1326 audit(2000000630.449:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24947 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fc0689109 code=0x0 [ 830.901944][T24944] squashfs image failed sanity check 03:43:51 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x3000000) 03:43:51 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x983a) 03:43:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="c000000016000166"], 0xc0}}, 0x0) 03:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x7f}, &(0x7f0000000140)=0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) 03:43:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {0x20}, {}, {}, {}, {}]}) 03:43:51 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="c00000003200010028bd7000fddbdf25000000000c0002000000000001000000a00001"], 0xc0}}, 0x0) 03:43:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x0, 0x0, 0x0, 0xcb}, 0x48) [ 831.614722][T24961] loop1: detected capacity change from 0 to 264192 03:43:51 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xe803) [ 831.673492][T24961] squashfs image failed sanity check 03:43:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 03:43:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc041, 0x0, 0x1}, 0x48) 03:43:51 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000c00000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 831.702596][T24971] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 831.786210][T24980] loop1: detected capacity change from 0 to 264192 [ 831.802392][T24980] squashfs image failed sanity check 03:43:52 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x4000000) 03:43:52 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf401) 03:43:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="c00000002400010028bd7000fddbdf25000000000c0000000000000001"], 0xc0}}, 0x0) [ 832.533655][T24984] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. 03:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x7f}, &(0x7f0000000140)=0x8) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) 03:43:53 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 03:43:53 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:53 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x20000) 03:43:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000002200016611307726ae4aaf812a"], 0xc0}}, 0x0) 03:43:53 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x7000000) [ 833.713513][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 833.719674][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="c00000003200010f28bd7000fddbdf25000000000c0002000000000001000000100001000c"], 0xc0}}, 0x0) 03:43:53 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x142800) 03:43:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), 0x98) [ 833.778374][T24995] loop1: detected capacity change from 0 to 264192 [ 833.799679][T24995] squashfs image failed sanity check 03:43:53 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010c0ed0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 833.857493][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 833.865066][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 833.874481][T25002] tc_dump_action: action bad kind 03:43:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd4c1, 0x3d9}, 0x10) 03:43:53 executing program 2: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x40004508, &(0x7f0000000000)) 03:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x7f}, &(0x7f0000000140)=0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x48}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x7f}, &(0x7f0000000140)=0x8) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x100000001) (async) 03:43:53 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x281400) 03:43:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x98) [ 833.921684][T25009] loop1: detected capacity change from 0 to 264192 [ 833.925222][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 833.949654][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read 03:43:53 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x14) 03:43:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) [ 833.988862][ T2976] loop1: unable to read partition table [ 833.996306][T25009] squashfs image failed sanity check 03:43:54 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x8000000) 03:43:54 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000ff0000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:54 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10}, {0x10}], 0x20}, 0x0) 03:43:54 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x400000) 03:43:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x100}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000180), 0x14) 03:43:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname(r0, 0x0, &(0x7f0000000280)) 03:43:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x388}, 0x98) [ 834.650569][T25040] loop1: detected capacity change from 0 to 264192 [ 834.687029][T25040] squashfs image failed sanity check 03:43:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0xfffffffffffffff8, 0xfffffffffffffff8, 0x1, 0x6, 0x0, [0x8, 0x20, 0x0, 0x9]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = dup2(r0, r0) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) 03:43:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x800000) 03:43:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000180)={r1}, 0x14) 03:43:55 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) close(r0) pipe2(&(0x7f0000000040), 0x0) 03:43:55 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xa000000) [ 836.033576][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 836.040628][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:43:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000000c0), 0xc) 03:43:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)=0x2) [ 836.110600][T25060] loop1: detected capacity change from 0 to 264192 03:43:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x100}, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f00000002c0)={r3}, &(0x7f0000000040)=0x8) 03:43:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1000000) 03:43:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) [ 836.190657][T25060] squashfs image failed sanity check 03:43:55 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0xfffffffffffffff8, 0xfffffffffffffff8, 0x1, 0x6, 0x0, [0x8, 0x20, 0x0, 0x9]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = dup2(r0, r0) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0xfffffffffffffff8, 0xfffffffffffffff8, 0x1, 0x6, 0x0, [0x8, 0x20, 0x0, 0x9]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) dup2(r0, r0) (async) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) (async) 03:43:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), 0x88) 03:43:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x2000000) 03:43:55 executing program 0: pipe2(0x0, 0x10000c) [ 836.300291][T25075] loop1: detected capacity change from 0 to 264192 [ 836.300909][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 836.325599][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 836.341181][ T2976] loop1: unable to read partition table 03:43:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002a80)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x40}, 0x0) [ 836.352594][T25075] squashfs image failed sanity check 03:43:56 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xe000000) 03:43:56 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x3a) 03:43:56 executing program 2: r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 03:43:56 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3000000) 03:43:56 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0xfffffffffffffff8, 0xfffffffffffffff8, 0x1, 0x6, 0x0, [0x8, 0x20, 0x0, 0x9]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) r1 = dup2(r0, r0) ioctl$TCFLSH(r1, 0x540b, 0x1) (async, rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) 03:43:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x27, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000140)="40c13367aac137017c1eb59a6c7aa288", 0x10}]) 03:43:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x8000f) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 836.943097][T25097] loop1: detected capacity change from 0 to 264192 03:43:56 executing program 2: process_vm_writev(0x0, &(0x7f0000001300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:43:56 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4000000) [ 836.987695][T25097] squashfs image failed sanity check 03:43:56 executing program 2: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_clone(0x44000080, &(0x7f0000000000)="c2f3ddb4f6f35cc566812d9030e7cd6d61690b98e36fce9aafa42580655dfa66a4a28612f7886aaa0ac242f224b6ccfc87a2772008c5e2f21f8739e4fce627e803743fd3d31071f3cee5af1e4c5cb7446ac6121e6a4eec2d145ccc6010c39e52e65d418b3fecfd5991e7dc7e327ce60cfca3da8ec3e30ca9d0c451700e6b6fbccddbc9c2f148cbc49a0477e61b4d49d0c11e088fcdb8a1698d3e5ddc948c1b799e2554fc76d6fe81743b8ade9c1d812388b136caf92c757b3e9195849810ceee90b13226e4dd56c3a0bf6747eacad67e61e6800139523ca8a226eb28b899666a18", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="fef04c17973b8d01e56f82f3d4ddd0dd17d1373f8b2efa2e9b721d90cd79e5e53ef9c21b2564bb164ec8a7171904ec59acd24f0fd38b8617430082be34e796144fb5051cd623d1d7f25a8bc994040a4a5724ffd42975482d62784d57363e49967620c9b6c153f6b1c3d778e1fbac78270366ec8c128fc7f05fd34cb2c67693efc8154fcf1252ab85a331ebb320b049e2def32509c60998a175f16fd6b88bcece9bfb36534c9997af93e20d8eaad32bd186fb8c25c519296bcefd9898915bc39345ca52e4eaf2") ptrace(0x4207, r0) 03:43:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x8000f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:43:57 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xf000000) 03:43:57 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010dae30100000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:57 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x7000000) 03:43:57 executing program 0: ioprio_set$uid(0x0, 0x0, 0x0) 03:43:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x8000f) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x8000f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:43:57 executing program 2: r0 = io_uring_setup(0x392f, &(0x7f0000000200)={0x0, 0x5ad3}) io_uring_setup(0x477d, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 03:43:57 executing program 0: syz_io_uring_setup(0x5972, &(0x7f0000000000)={0x0, 0x0, 0x31}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:43:57 executing program 2: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x32) 03:43:57 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x8000000) [ 837.884998][T25124] loop1: detected capacity change from 0 to 264192 [ 837.919737][T25124] squashfs image failed sanity check 03:43:57 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000040), 0x0) 03:43:57 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) [ 838.053099][T25151] loop1: detected capacity change from 0 to 264192 [ 838.109783][T25151] squashfs image failed sanity check 03:43:58 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x10000000) 03:43:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 03:43:58 executing program 0: r0 = socket(0x1, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 03:43:58 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xa000000) 03:43:58 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f0010dce30100000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:58 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, 0x0, 0x0) 03:43:58 executing program 2: clock_getres(0x4, &(0x7f0000000040)) 03:43:58 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xe000000) [ 838.808444][T25157] loop1: detected capacity change from 0 to 264192 [ 838.847982][T25157] squashfs image failed sanity check 03:43:58 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 03:43:58 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 838.953032][T25172] loop1: detected capacity change from 0 to 264192 [ 838.970665][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.999873][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 839.016771][ T2976] loop1: unable to read partition table [ 839.031239][T25172] squashfs image failed sanity check 03:43:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) 03:43:59 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf000000) 03:43:59 executing program 0: syz_clone(0x44000080, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 03:43:59 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) 03:43:59 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:43:59 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x11000000) [ 840.113657][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 840.120004][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 840.171989][T25184] loop1: detected capacity change from 0 to 264192 03:43:59 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x10000000) 03:43:59 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) [ 840.247476][T25184] squashfs image failed sanity check [ 840.271172][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 840.279392][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:43:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) (async) 03:43:59 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:00 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 03:44:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)=0x94) 03:44:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x11000000) [ 840.435397][T25203] loop1: detected capacity change from 0 to 264192 [ 840.456470][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 840.459925][T25203] squashfs image failed sanity check [ 840.464966][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:44:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x3, 0x1}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x78) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000100)={0x2, 0x5, 0x8000, 0x7, 0x17, "314723c467d89420445f757f2a7bcea53ba26f"}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x240e00, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x9, 0x8, 0x1, 0x9, 0x837, 0x1000, 0x20, 0xae5d, 0x7], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KDADDIO(r4, 0x400455c8, 0xffffa) 03:44:00 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 03:44:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x3, 0x1}) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x78) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000100)={0x2, 0x5, 0x8000, 0x7, 0x17, "314723c467d89420445f757f2a7bcea53ba26f"}) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x240e00, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x9, 0x8, 0x1, 0x9, 0x837, 0x1000, 0x20, 0xae5d, 0x7], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KDADDIO(r4, 0x400455c8, 0xffffa) 03:44:00 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x5, 0x0, [@rand_addr=' \x01\x00', @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @local={0xfe, 0x80, '\x00', 0x0}]}, 0x58) 03:44:00 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x15000000) 03:44:00 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x15000000) 03:44:00 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 03:44:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x3, 0x1}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x78) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000100)={0x2, 0x5, 0x8000, 0x7, 0x17, "314723c467d89420445f757f2a7bcea53ba26f"}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x240e00, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x9, 0x8, 0x1, 0x9, 0x837, 0x1000, 0x20, 0xae5d, 0x7], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KDADDIO(r4, 0x400455c8, 0xffffa) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x3, 0x1}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x78) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000100)={0x2, 0x5, 0x8000, 0x7, 0x17, "314723c467d89420445f757f2a7bcea53ba26f"}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x240e00, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x9, 0x8, 0x1, 0x9, 0x837, 0x1000, 0x20, 0xae5d, 0x7], 0x9, 0x80800}) (async) ioctl$KDADDIO(r4, 0x400455c8, 0xffffa) (async) 03:44:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, 0x0) 03:44:00 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x2, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 03:44:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {}]}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001600)=""/236, 0x39, 0xec, 0x1}, 0x20) [ 841.037693][T25232] loop1: detected capacity change from 0 to 264192 03:44:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x40000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 03:44:00 executing program 2: socketpair(0x2, 0xa, 0x0, &(0x7f0000001180)) 03:44:00 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1f000000) 03:44:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2003, 0x0, 0x0) [ 841.095316][T25232] squashfs image failed sanity check [ 841.233991][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 841.241066][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:44:01 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x1f000000) 03:44:01 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:01 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8916, 0x0) 03:44:01 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x30750000) 03:44:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0xf00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}}) 03:44:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x40000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 03:44:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x74}]}}, &(0x7f0000000080)=""/190, 0x26, 0xbe, 0x1}, 0x20) 03:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000240)=0x2, 0x4) [ 841.967076][T25267] loop1: detected capacity change from 0 to 264192 03:44:01 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x34000000) 03:44:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x40000) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 842.007683][T25267] squashfs image failed sanity check 03:44:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000040)) 03:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, 0x0) [ 842.139335][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 842.146695][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:44:02 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x34000000) 03:44:02 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:02 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 03:44:02 executing program 0: socket(0x2, 0xa, 0x0) socket(0x11, 0xa, 0x0) 03:44:02 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x40000000) 03:44:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x131581, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) syz_open_pts(r5, 0xb82) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:44:02 executing program 0: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 03:44:02 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 03:44:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x131581, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) syz_open_pts(r5, 0xb82) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 842.869384][T25296] loop1: detected capacity change from 0 to 264192 03:44:02 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x40020000) 03:44:02 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8970, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 03:44:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@cb_func], &(0x7f0000000000)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 842.940009][T25296] squashfs image failed sanity check 03:44:03 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x40000000) 03:44:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x131581, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) syz_open_pts(r5, 0xb82) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:44:03 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:03 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4c1d0000) 03:44:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x6}, 0x48) 03:44:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x16, 0x0, 0x4, 0xc03}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 03:44:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x16, 0x0, 0x4, 0xc03}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 03:44:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$KDADDIO(r0, 0x400455c8, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40a800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)=0x1) 03:44:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x18022) [ 843.769292][T25323] loop1: detected capacity change from 0 to 264192 03:44:03 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x983a0000) [ 843.822948][T25323] squashfs image failed sanity check 03:44:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x16, 0x0, 0x4, 0xc03}, 0x48) bpf$MAP_GET_NEXT_KEY(0xc, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 03:44:03 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 843.936553][T25347] loop1: detected capacity change from 0 to 264192 [ 843.965577][T25347] squashfs image failed sanity check 03:44:04 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x40020000) 03:44:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xe8030000) 03:44:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x48, 0x0, 0x0, "575ed59f8e7d9f7a624288fc1b0fb3c5bae37f5af2dbaf724c507ab7c45d2772df491a1902fc348fc4719c289c9b53de92"}, {0x1010, 0x0, 0x0, "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"}, {0xfb0, 0x0, 0x0, "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"}], 0x2008}, 0x0) 03:44:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40a800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)=0x1) 03:44:04 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000080)) 03:44:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf4010000) 03:44:04 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@random="6b57af6b5d7e", @random="6342f1a254b0", @val, {@ipv4}}, 0x0) 03:44:04 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@random="6b57af6b5d7e", @random="6342f1a254b0", @val, {@ipv4}}, 0x0) [ 844.697779][T25353] loop1: detected capacity change from 0 to 264192 [ 844.736775][T25353] squashfs image failed sanity check 03:44:04 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:04 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xffffff7f) 03:44:04 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) [ 844.848788][T25371] loop1: detected capacity change from 0 to 264192 [ 844.853310][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 844.888228][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 844.898968][ T2976] loop1: unable to read partition table [ 844.910610][T25371] squashfs image failed sanity check 03:44:05 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x8000000000) 03:44:05 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 03:44:05 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:05 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0, 0x10, r0, 0x0) 03:44:05 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xe8030000) 03:44:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$KDADDIO(r0, 0x400455c8, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40a800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x8) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40a800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x48}}, 0x0) (async) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)=0x1) (async) 03:44:05 executing program 0: nanosleep(&(0x7f0000000040)={0x0, 0xfffffffffffffffc}, 0x0) 03:44:05 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x7) 03:44:05 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x2000000000000) 03:44:05 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@random="6b57af6b5d7e", @random="6342f1a254b0", @val, {@ipv4}}, 0x0) [ 845.631648][T25387] loop1: detected capacity change from 0 to 264192 [ 845.660358][T25387] unable to read fragment index table 03:44:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe3ab54b5eb038bb0, 0x0) renameat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00') 03:44:05 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:05 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@random="6b57af6b5d7e", @random="6342f1a254b0", @val, {@ipv4}}, 0x0) 03:44:05 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x14280000000000) 03:44:05 executing program 2: syz_emit_ethernet(0x56, &(0x7f00000001c0)={@random="799815cd3352", @empty, @val, {@ipv6}}, 0x0) 03:44:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/242, 0x27, 0xf2, 0x1}, 0x20) [ 845.852796][T25415] loop1: detected capacity change from 0 to 264192 [ 845.917307][T25415] unable to read fragment index table 03:44:06 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xf4010000) 03:44:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000840)=""/227, 0xe3}], 0x2}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="01dc1b9a3e7e8d5d16c06d979a4b401d2327c8aaa148a53931a3adc7a629dbabe7569c36d42c64309799956ac104475eb8a786916c52cfb957a75756570b29f579f2fdab35a0700e0c9d244a06efe4cb0c3ba08806852c6d3c110663ebe3a6ac17b5c871ed2a66665dfc8bff25a64b28ef2d757fd27bd72b5459862c7b73", 0x7e}, {&(0x7f0000000080)="7b83d7c2dcaa72a59f6cc980ef1e484b767ac752afde75b2aeb879c534094f012a6de5cb6f", 0x25}, {&(0x7f00000000c0)="d7074a1275c1ccaa5b3bbf89b66ad35f95a6f778345b48dbcd85afe967f011155cab6588b18fd90203db679084e5356e156918daecca80cde9baa6cf91c52f59", 0x40}], 0x3}, 0x0) 03:44:06 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x40000000000000) 03:44:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb}, 0x48) 03:44:06 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08fc0000470000000800db002ca2f15df1caae73ebbd7ffa58998da61799c425b820cb375de6f042a9e063d3bb2f564d7970e134fba1dd93ed5d7692cda19e595ad7e5ca7d4d111c352f01432b27a55fc4de03d72c809f6f71fe7dde31c9572c90ea5fe5dddbf2acdca86ec2b7630a39a1ef4e277b5523975b983ca8900659a6c5675032e3ffbf", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000100)={0xd, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:44:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 03:44:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 846.540341][T25425] loop1: detected capacity change from 0 to 264192 [ 846.545243][T25424] __nla_validate_parse: 1 callbacks suppressed [ 846.545257][T25424] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 846.577559][T25425] unable to read fragment index table 03:44:06 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x80000000000000) 03:44:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001940)={&(0x7f0000001740)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) 03:44:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08fc0000470000000800db002ca2f15df1caae73ebbd7ffa58998da61799c425b820cb375de6f042a9e063d3bb2f564d7970e134fba1dd93ed5d7692cda19e595ad7e5ca7d4d111c352f01432b27a55fc4de03d72c809f6f71fe7dde31c9572c90ea5fe5dddbf2acdca86ec2b7630a39a1ef4e277b5523975b983ca8900659a6c5675032e3ffbf", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000100)={0xd, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:44:06 executing program 2: timer_create(0x0, &(0x7f0000000780)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) [ 846.613956][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 846.621253][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 846.681333][T25438] ptm ptm0: ldisc open failed (-12), clearing slot 0 03:44:07 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0xffffff7f) 03:44:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08fc0000470000000800db002ca2f15df1caae73ebbd7ffa58998da61799c425b820cb375de6f042a9e063d3bb2f564d7970e134fba1dd93ed5d7692cda19e595ad7e5ca7d4d111c352f01432b27a55fc4de03d72c809f6f71fe7dde31c9572c90ea5fe5dddbf2acdca86ec2b7630a39a1ef4e277b5523975b983ca8900659a6c5675032e3ffbf", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000100)={0xd, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10800, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x13) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000008000300", @ANYRES32=r5, @ANYBLOB="08fc0000470000000800db002ca2f15df1caae73ebbd7ffa58998da61799c425b820cb375de6f042a9e063d3bb2f564d7970e134fba1dd93ed5d7692cda19e595ad7e5ca7d4d111c352f01432b27a55fc4de03d72c809f6f71fe7dde31c9572c90ea5fe5dddbf2acdca86ec2b7630a39a1ef4e277b5523975b983ca8900659a6c5675032e3ffbf", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000100)={0xd, 0x8}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:44:07 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) sync() 03:44:07 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:07 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/37, 0x25, 0x0, 0x0}}, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) pipe2(&(0x7f0000000240), 0x0) 03:44:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x100000000000000) [ 847.457125][T25457] loop1: detected capacity change from 0 to 264192 [ 847.470311][T25452] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:44:07 executing program 0: bpf$BPF_PROG_ATTACH(0x2, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2076, &(0x7f0000001240)={0x0, 0x0, 0x2, 0x0, 0x111}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000012c0), 0x0) syz_io_uring_setup(0xef9, &(0x7f00000014c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000001540), &(0x7f0000001580)) 03:44:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000002500), &(0x7f0000002540)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002980)={[{@block={'block', 0x3d, 0xb00000000000000}}]}) 03:44:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x200000000000000) [ 847.498657][T25457] unable to read fragment index table [ 847.525981][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 847.533802][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 03:44:07 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:07 executing program 0: socket$inet(0x2, 0x0, 0xd759) 03:44:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) [ 847.652156][T25483] loop1: detected capacity change from 0 to 264192 [ 847.667872][T25483] squashfs image failed sanity check 03:44:07 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x8000000000) 03:44:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x300000000000000) 03:44:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 03:44:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) 03:44:07 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x8, 0x180000}, 0x20) 03:44:07 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:07 executing program 2: io_uring_setup(0x11b6, &(0x7f0000005680)={0x0, 0x0, 0x2}) 03:44:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0x0, 0x0, 0x0, 0x188d}, 0x48) 03:44:07 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x400000000000000) 03:44:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4) [ 848.337263][T25492] loop1: detected capacity change from 0 to 264192 [ 848.370518][T25492] unable to read fragment index table 03:44:08 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000002000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:08 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x2}, 0x0, 0x0, &(0x7f00000000c0), 0x0) [ 848.499548][T25512] loop1: detected capacity change from 0 to 264192 [ 848.519776][T25512] unable to read fragment index table 03:44:08 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x2000000000000) 03:44:08 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x700000000000000) 03:44:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 03:44:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 03:44:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 03:44:10 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000003000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:10 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x800000000000000) 03:44:10 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x14280000000000) [ 850.433548][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 850.441720][ T3686] Bluetooth: hci6: command tx timeout 03:44:10 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 03:44:10 executing program 2: open_tree(0xffffffffffffffff, 0x0, 0x9100) [ 850.502740][T25528] loop1: detected capacity change from 0 to 264192 03:44:10 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xa00000000000000) 03:44:10 executing program 0: syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x185000) [ 850.568189][T25528] unable to read fragment index table 03:44:10 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000006580)={{0x1, 0x0, 0x0, 0xee01}}) 03:44:10 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 850.682129][T25543] loop1: detected capacity change from 0 to 264192 [ 850.700701][T25543] unable to read fragment index table 03:44:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 03:44:12 executing program 0: timer_create(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 03:44:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/slabinfo\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xce, &(0x7f0000000200)=""/206, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x80) 03:44:12 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x40000000000000) 03:44:12 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xe00000000000000) 03:44:12 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0xc0, 0x288, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'batadv0\x00', 'ip6_vti0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x1c8, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'sit0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) [ 852.593636][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 852.593673][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:44:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) [ 852.670271][T25556] loop1: detected capacity change from 0 to 264192 [ 852.695264][T25559] x_tables: duplicate underflow at hook 2 03:44:12 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf00000000000000) 03:44:12 executing program 2: io_setup(0x7, &(0x7f0000000680)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) [ 852.717677][T25556] unable to read fragment index table 03:44:12 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) 03:44:12 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:12 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1000000000000000) [ 852.841644][T25572] loop1: detected capacity change from 0 to 264192 [ 852.879916][T25572] unable to read fragment index table 03:44:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105c00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x400003, 0x200, 0x3, 0x8, 0x5, "b8644dad9dadbc4c517258decf4d38959cc300"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) 03:44:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x9, 0x6, 0xc000, 0x2}, 0x48) 03:44:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x125d, 0x20000000) 03:44:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1100000000000000) 03:44:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:14 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x80000000000000) [ 854.753428][T21378] Bluetooth: hci6: command 0x1003 tx timeout [ 854.753568][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 03:44:14 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4020940d, &(0x7f0000000000)="04") [ 854.812654][T25583] loop1: detected capacity change from 0 to 264192 03:44:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1500000000000000) 03:44:14 executing program 2: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 03:44:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105c00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x400003, 0x200, 0x3, 0x8, 0x5, "b8644dad9dadbc4c517258decf4d38959cc300"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) [ 854.885282][T25583] unable to read fragment index table 03:44:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x1f00000000000000) [ 854.993096][T25599] loop1: detected capacity change from 0 to 264192 [ 855.020210][ T2976] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:44:14 executing program 2: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x40000000000000) [ 855.040787][ T2976] Buffer I/O error on dev loop1, logical block 0, async page read [ 855.093493][ T2976] loop1: unable to read partition table [ 855.112242][T25599] unable to read fragment index table 03:44:14 executing program 0: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf00000000000000) 03:44:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105c00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x400003, 0x200, 0x3, 0x8, 0x5, "b8644dad9dadbc4c517258decf4d38959cc300"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105c00, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x48}}, 0x0) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x400003, 0x200, 0x3, 0x8, 0x5, "b8644dad9dadbc4c517258decf4d38959cc300"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) (async) 03:44:14 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3075000000000000) 03:44:14 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 855.256186][T25626] loop1: detected capacity change from 0 to 264192 [ 855.270041][T25626] unable to read fragment index table 03:44:15 executing program 3: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x100000000000000) 03:44:15 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x3400000000000000) 03:44:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 03:44:15 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:15 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4000000000000000) [ 855.659175][T25632] loop1: detected capacity change from 0 to 264192 03:44:15 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4002000000000000) [ 855.721769][T25632] unable to read fragment index table 03:44:15 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 855.822516][T25642] loop1: detected capacity change from 0 to 264192 [ 855.835351][T25642] unable to read fragment index table 03:44:15 executing program 2: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00100000000a000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 855.953231][T25644] loop2: detected capacity change from 0 to 264192 [ 855.968524][T25644] unable to read fragment index table 03:44:15 executing program 0: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0xf00000000000000) 03:44:15 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x4c1d000000000000) 03:44:15 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) 03:44:15 executing program 2: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 856.069518][T25648] loop1: detected capacity change from 0 to 264192 [ 856.116321][T25648] unable to read fragment index table [ 856.116897][T25651] loop2: detected capacity change from 0 to 264192 [ 856.151103][T25651] unable to read fragment index table 03:44:16 executing program 5: r0 = socket(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) clock_gettime(0x0, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x188000}}, 0x983a000000000000) 03:44:16 executing program 1: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f00100000000d000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486a84581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 856.570992][T25656] loop1: detected capacity change from 0 to 264192 [ 856.600482][T25656] unable to read fragment index table [ 857.713603][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 857.720402][T21379] ==================================================================